添加 Anubis

.dockerignore

@@ -12,5 +12,5 @@ site/
 .venv
 
 # deploy scripts
-/deploy
+deploy
-/.drone.yml
+.drone.yml

.drone.yml

@@ -25,19 +25,28 @@ steps:
     volumes:
       - name: docker-socket
         path: /var/run/docker.sock
-  - name: 部署到服务器
+  - name: 创建 Ansible Inventory 文件
-    image: plugins/ansible:3
+    image: alpine/helm:3.2.1
-    settings:
+    environment:
-      playbook: deploy/deploy.ansible.yml
+      CI_DEPLOY_SERVER:
-      inventory: deploy/inventory.ini
+        from_secret: CI-DEPLOY-SERVER
-      galaxy: deploy/requirements.ansible.yml
+      CI_DEPLOY_PORT:
-      primary_key:
+        from_secret: CI-DEPLOY-PORT
-        from_secret: CI-DEPLOY-KEY
+      CI_DEPLOY_USER:
-      user:
         from_secret: CI-DEPLOY-USER
-      extra_vars: |
+      CI_DEPLOY_KEY:
-        target_ip:
+        from_secret: CI-DEPLOY-KEY
-          from_secret: CI-DEPLOY-SERVER
+    commands:
+      - mkdir -p deploy
+      - echo "[jazzwhom_server]" > deploy/inventory.ini
+      - echo "prod_doc_server ansible_host=$${CI_DEPLOY_SERVER} ansible_port=$${CI_DEPLOY_PORT} ansible_user=$${CI_DEPLOY_USER}" >> deploy/inventory.ini
+      - echo "$${CI_DEPLOY_KEY}" > deploy/deploy_key
+      - chmod 600 deploy/deploy_key
+  - name: 部署到服务器
+    image: alpine/ansible:latest
+    commands:
+      - ansible-playbook --inventory deploy/inventory.ini --private-key deploy/deploy_key --ssh-common-args='-o StrictHostKeyChecking=no' deploy/deploy.ansible.yml
+
   - name: 发送构建结果到 ntfy
     image: parrazam/drone-ntfy
     when:

deploy/deploy.ansible.yml

@@ -14,4 +14,4 @@
       community.docker.docker_compose_v2:
         project_src: "{{ app_path }}"
         state: present
-        pull: yes
+        pull: always

deploy/docker-compose.yml

@@ -1,4 +1,35 @@
 services:
-  mttu-doc-web:
+  mttu-doc-web-inner:
     image: gitea.service.jazzwhom.top/mttu-developers/docs:latest
     restart: unless-stopped
+    networks:
+      - mttu-web-inner
+  mttu-doc-web:
+    restart: unless-stopped
+    image: ghcr.io/techarohq/anubis:latest
+    environment:
+      - BIND=:80
+      - TARGET=http://mttu-doc-web-inner:80
+      - _RESTART_DUMMY=6
+      - REDIRECT_DOMAINS=*.jazzwhom.top,jazzwhom.top,*.passthem.top,passthem.top
+      - POLICY_FNAME=/data/cfg/botPolicy.yaml
+    healthcheck:
+      test:
+        - CMD
+        - anubis
+        - --healthcheck
+      interval: 5s
+      timeout: 30s
+      retries: 5
+      start_period: 500ms
+    depends_on:
+      - server
+    networks:
+      - mttu-web-inner
+      - caddy-internal
+    volumes:
+      - /opt/anubis/botPolicies.yaml:/data/cfg/botPolicy.yaml:ro
+
+networks:
+  caddy-internal:
+    external: true

deploy/inventory.ini

@@ -1,3 +0,0 @@
-[jazzwhom_server]
-# Placeholder target only...
-deploy_target_host ansible_host=127.0.0.1 ansible_user=placeholder

deploy/requirements.ansible.yml

@@ -1,2 +0,0 @@
-collections:
-  - name: community.docker