添加 Anubis

.drone.yml

@@ -34,18 +34,19 @@ steps:
         from_secret: CI-DEPLOY-PORT
       CI_DEPLOY_USER:
         from_secret: CI-DEPLOY-USER
+      CI_DEPLOY_KEY:
+        from_secret: CI-DEPLOY-KEY
     commands:
       - mkdir -p deploy
-      - echo "[jazzwhom_server]" > ansible/inventory.ini
-      - echo "prod_doc_server ansible_host=\${CI_DEPLOY_SERVER} ansible_port=\${CI_DEPLOY_SERVER} ansible_user=\${CI_DEPLOY_USER}" >> ansible/inventory.ini
+      - echo "[jazzwhom_server]" > deploy/inventory.ini
+      - echo "prod_doc_server ansible_host=$${CI_DEPLOY_SERVER} ansible_port=$${CI_DEPLOY_PORT} ansible_user=$${CI_DEPLOY_USER}" >> deploy/inventory.ini
+      - echo "$${CI_DEPLOY_KEY}" > deploy/deploy_key
+      - chmod 600 deploy/deploy_key
   - name: 部署到服务器
-    image: plugins/ansible:3
-    settings:
-      playbook: deploy/deploy.ansible.yml
-      inventory: deploy/inventory.ini
-      galaxy: deploy/requirements.ansible.yml
-      primary_key:
-        from_secret: CI-DEPLOY-KEY
+    image: alpine/ansible:latest
+    commands:
+      - ansible-playbook --inventory deploy/inventory.ini --private-key deploy/deploy_key --ssh-common-args='-o StrictHostKeyChecking=no' deploy/deploy.ansible.yml
+
   - name: 发送构建结果到 ntfy
     image: parrazam/drone-ntfy
     when:

deploy/deploy.ansible.yml

@@ -14,4 +14,4 @@
       community.docker.docker_compose_v2:
         project_src: "{{ app_path }}"
         state: present
-        pull: yes
+        pull: always

deploy/docker-compose.yml

@@ -1,4 +1,35 @@
 services:
-  mttu-doc-web:
+  mttu-doc-web-inner:
     image: gitea.service.jazzwhom.top/mttu-developers/docs:latest
     restart: unless-stopped
+    networks:
+      - mttu-web-inner
+  mttu-doc-web:
+    restart: unless-stopped
+    image: ghcr.io/techarohq/anubis:latest
+    environment:
+      - BIND=:80
+      - TARGET=http://mttu-doc-web-inner:80
+      - _RESTART_DUMMY=6
+      - REDIRECT_DOMAINS=*.jazzwhom.top,jazzwhom.top,*.passthem.top,passthem.top
+      - POLICY_FNAME=/data/cfg/botPolicy.yaml
+    healthcheck:
+      test:
+        - CMD
+        - anubis
+        - --healthcheck
+      interval: 5s
+      timeout: 30s
+      retries: 5
+      start_period: 500ms
+    depends_on:
+      - server
+    networks:
+      - mttu-web-inner
+      - caddy-internal
+    volumes:
+      - /opt/anubis/botPolicies.yaml:/data/cfg/botPolicy.yaml:ro
+
+networks:
+  caddy-internal:
+    external: true

deploy/requirements.ansible.yml

@@ -1,2 +0,0 @@
-collections:
-  - name: community.docker