...

..
2025-01-14 13:40:17 -05:00 · 2025-01-14 13:37:29 -05:00 · 2025-01-14 13:35:19 -05:00 · 2025-01-14 13:29:55 -05:00 · 2025-01-14 13:25:27 -05:00 · 2025-01-14 13:21:18 -05:00
4 changed files with 2147 additions and 1857 deletions
@@ -14,36 +14,49 @@ jobs:
      - name: Checkout Code
        uses: actions/checkout@v4

-      - name: PR list
+      - name: Install tea
+        uses: supplypike/setup-bin@v4
+        with:
+          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
+          name: 'tea'
+          version: '0.9.2'
+
+      - name: Check if PR exists & Create
        id: list-prs
        run: |
-          curl -sSL https://dl.gitea.com/tea/main/tea-main-linux-amd64 -o /usr/local/bin/tea
-          chmod +x /usr/local/bin/tea
-          echo "Listing PRs..."
-          tea login add --name gitea-rinoa --url ${{ vars.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
-          pr_state=$(tea pr ls --repo ${{ github.repository }} --state open --output csv | egrep 'open|closed|merged' | awk -F, '{print $3}' | sed -e 's|"||g')
-          echo "pr_state=$(echo ${pr_state})" >> "$GITHUB_OUTPUT"
-
-      - name: Create PR
-        if: steps.list-prs.outputs.pr_state == 'closed'
-        uses: arifer612/Gitea-PR-action@v1.2.0
-        with:
-          url: ${{ gitea.server_url }}
-          token: ${{ secrets.BOT_GITEA_TOKEN }}
-          assignee: ${{ gitea.actor }}
+          tea login add --name gitea-rinoa --url ${{ secrets.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
+          tea login default gitea-rinoa
+          echo "Checking if PR exists for ${{ github.ref_name }}..."
+          tea pr ls --repo ${{ github.repository }} --state all --fields index,title,head,state --output csv | egrep '${{ github.ref_name }}' | head -1 | egrep -q 'open'
+          if [ $? -eq 0 ]; then
+            echo "An open PR exists, skipping creation..."
+          elif [ $? -eq 1 ]; then
+            echo "No open PRs, creating one..."
+            tea pr c -r "${{ github.repository }}" -t "Automated PR for ${{ github.ref_name }}" -d "Automated PR for ${{ github.ref_name }}"
+          fi

  docker-compose-test:
    name: Docker Compose Test
-    needs: [create-pr]
+    needs: [check-and-create-pr]
    runs-on: ubuntu-latest
+    env:
+      VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }}
+      VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
+      
+      - name: Install jq
+        uses: dcarbone/install-jq-action@v3.0.1

-      - name: Generate ephemeral .env compose file
-        id: generate-env-file-pr
+      - name: Install Vault
+        uses: cpanato/vault-installer@main
+        with:
+          vault-release: '1.18.3'
+
+      - name: Generate .env file for linting
        run: |
-          echo "${{ secrets.RINOA_ENV }}" > .env
+          vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env

      - name: Docker Compose Lint
        uses: yu-ichiro/spin-up-docker-compose-action@v1
@@ -56,20 +69,146 @@ jobs:
        env:
          DOCKER_HOST: tcp://dockerproxy:2375

-  merge-pr:
-    name: PR Merge
-    runs-on: ubuntu-latest
+  cloudflare-dns-setup:
+    name: Cloudflare DNS Setup
    needs: [docker-compose-test]
+    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

-      - name: Tea CLI Setup & PR Merge
+      - name: Install jq
+        uses: dcarbone/install-jq-action@v3.0.1
+
+      - name: Install yq
+        uses: dcarbone/install-yq-action@v1
+      
+      - name: Install flarectl
+        uses: supplypike/setup-bin@v4
+        with:
+          uri: 'https://github.com/cloudflare/cloudflare-go/releases/download/v0.113.0/flarectl_0.113.0_linux_amd64.tar.gz'
+          name: 'flarectl'
+          version: '0.113.0'
+
+      - name: Grab Subdomains from Docker Compose & Cloudflare
+        id: grab-subdomains
+        env:
+          CF_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
+          CF_API_EMAIL: ${{ secrets.CF_API_EMAIL }}
        run: |
-          curl -sSL https://dl.gitea.com/tea/main/tea-main-linux-amd64 -o /usr/local/bin/tea
-          chmod +x /usr/local/bin/tea
-          echo "Merging PR..."
-          tea login add --name gitea-rinoa --url ${{ vars.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
-          echo ${{ gitea.ref_name }}
+          echo "Grabbing subdomains from docker-compose.yml..."
+          yq '.services[].labels.swag_url' docker-compose.yml | egrep -v 'null' | sed -e 's|"||g' | awk -F'.' '{print $1}' | sort > compose_subdomains.txt
+          echo "Grabbing subdomains from Cloudflare..."
+          flarectl --json dns list --zone "trez.wtf" --type=CNAME --content "trez.wtf" | jq '.[].Name' | sed -e 's|"||g' | awk -F"." '{print $1}' | sort > cloudflare_subdomains.txt
+          
+      - name: Compare Subdomains
+        id: compare-subdomains
+        uses: LouisBrunner/diff-action@v2.2.0
+        with:
+          old: compose_subdomains.txt
+          new: cloudflare_subdomains.txt
+          mode: addition
+          tolerance: mixed-better
+          output: domain_compare.txt
+
+      - name: Create Subdomains
+        if: steps.compare-subdomains.outputs.output != ''
+        continue-on-error: true
+        env:
+          CF_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
+          CF_API_EMAIL: ${{ secrets.CF_API_EMAIL }}
+        run: |
+          cat domain_compare.txt | egrep '^-[a-z]' | sed -e 's|-||g' | while read -r subdomain; do
+            echo "Creating $subdomain.trez.wtf..."
+            flarectl dns create --zone "trez.wtf" --name "${subdomain}" --type=CNAME --content "trez.wtf"
+          done
+
+  regenerate-readme:
+    name: Update README
+    runs-on: ubuntu-latest
+    needs: [cloudflare-dns-setup]
+    outputs:
+      pr-pushed: ${{ steps.commit-readme.outputs.pushed }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install yq
+        uses: dcarbone/install-yq-action@v1
+      
+      - name: Generate service list
+        run: |
+          yq '.services | to_entries | map({"service": .key, "image": .value.image})' docker-compose.yml > services.yml
+
+      - name: Generate Markdown Table
+        uses: gazab/create-markdown-table@v1
+        id: service-table
+        with:
+          file: ./services.yml
+
+      - name: Regenerate README
+        run: |
+          echo "# List of Services" > README.md
+          echo -e "\n\n" >> README.md
+          echo "${{ steps.service-table.outputs.table }}" >> README.md
+
+      - name: Add/Commit README.md
+        id: commit-readme
+        uses: EndBug/add-and-commit@v9
+        with:
+          message: "chore: Update README"
+          add: "README.md"
+
+  pr-merge:
+    name: PR Merge
+    needs: [regenerate-readme]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      
+      - name: Install tea
+        uses: supplypike/setup-bin@v4
+        with:
+          uri: 'https://gitea.com/gitea/tea/releases/download/v0.9.2/tea-0.9.2-linux-amd64'
+          name: 'tea'
+          version: '0.9.2'
+
+      - name: PR Merge
+        id: pr_merge
+        run: |
+          tea login add --name gitea-rinoa --url ${{ secrets.RINOA_GITEA_URL }} --user gitea-sonarqube-bot --password "${{ secrets.BOT_GITEA_PASSWORD }}" --token ${{ secrets.BOT_GITEA_TOKEN }}
+          tea login default gitea-rinoa
          pr_index=$(tea pr ls --repo ${{ github.repository }} --state open --fields index,title,head,state --output csv | egrep ${{ gitea.ref_name }} | awk -F, '{print $1}' | sed -e 's|"||g')
-          tea pr m --repo ${{ github.repository }} --title "Auto Merge" --message "Merged by ${{ gitea.actor }}" --output table ${pr_index}
+          tea pr m --repo ${{ github.repository }} --title "Auto Merge of PR #${pr_index} - ${{ gitea.ref_name }}" --message "Merged by ${{ gitea.actor }}" --output table ${pr_index}
+
+
+  docker-compose-deploy:
+    name: Deploy via Docker Compose
+    runs-on: ubuntu-latest
+    needs: [pr-merge]
+    env:
+      VAULT_ADDR: ${{ secrets.RINOA_VAULT_ADDR }}
+      VAULT_TOKEN: ${{ secrets.VAULT_GITEA_TOKEN }}
+      DOCKER_HOST: tcp://dockerproxy:2375
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: main
+
+      - name: Install Vault
+        uses: cpanato/vault-installer@main
+
+      - name: Generate .env file for deployment
+        run: |
+           vault kv get -format=json rinoa-docker/env | jq -r '.data.data' | jq -r 'keys[] as $k | "\($k)='\''\(.[$k])'\''"' > .env
+
+      - name: Docker Compose Deployment
+        uses: keatonLiu/docker-compose-remote-action@v1.2
+        with: 
+          ssh_user: gitea-deploy
+          ssh_host: 192.168.1.254
+          ssh_host_public_key: ${{ secrets.RINOA_GITEA_PUBLIC_SSH_KEY }}
+          ssh_private_key: ${{ secrets.RINOA_GITEA_PRIVATE_SSH_KEY }}
+          docker_compose_file: docker-compose.yml
@@ -0,0 +1,157 @@
+# List of Services
+
+
+
+| Service | Image |
+| --- | --- |
+| actual_server | docker.io/actualbudget/actual-server:latest |
+| adguard | adguard/adguardhome:latest |
+| apprise | lscr.io/linuxserver/apprise-api:latest |
+| audiobookshelf | ghcr.io/advplyr/audiobookshelf:latest |
+| authelia | authelia/authelia:master |
+| authelia-pg | postgres:16-alpine |
+| bazarr | lscr.io/linuxserver/bazarr:latest |
+| bitmagnet | ghcr.io/bitmagnet-io/bitmagnet:latest |
+| bitmagnet-pg-db | postgres:17-alpine |
+| bitwarden | vaultwarden/server:latest |
+| bluesky-pds | ghcr.io/bluesky-social/pds:latest |
+| browserless | ghcr.io/browserless/chromium:latest |
+| bunkerweb | bunkerity/bunkerweb:latest |
+| bunkerweb-scheduler | bunkerity/bunkerweb-scheduler:latest |
+| bunkerweb-ui | bunkerity/bunkerweb-ui:latest |
+| castopod | castopod/castopod:latest |
+| cloudflared | cloudflare/cloudflared:latest |
+| cloudflareddns | ghcr.io/hotio/cloudflareddns:latest |
+| crowdsec | crowdsecurity/crowdsec:latest |
+| crowdsec-dashboard | metabase/metabase |
+| czkawka | jlesage/czkawka |
+| dagu-scheduler | ghcr.io/dagu-org/dagu:latest |
+| dagu-server | ghcr.io/dagu-org/dagu:latest |
+| delugevpn | ghcr.io/binhex/arch-delugevpn:latest |
+| docker-socket-proxy | ghcr.io/tecnativa/docker-socket-proxy:latest |
+| docuseal | docuseal/docuseal:latest |
+| duplicati | lscr.io/linuxserver/duplicati:latest |
+| fastenhealth | ghcr.io/fastenhealth/fasten-onprem:main |
+| flaresolverr | ghcr.io/flaresolverr/flaresolverr:latest |
+| ghost | ghost:latest |
+| gitea | gitea/gitea:1.22.6 |
+| gitea-db | postgres:14 |
+| gitea-opengist | ghcr.io/thomiceli/opengist:latest |
+| gitea-runner | gitea/act_runner:latest |
+| gitea-sonarqube-bot | justusbunsi/gitea-sonarqube-bot:v0.4.0 |
+| gluetun | qmcgaw/gluetun:latest |
+| gotify | gotify/server |
+| grafana | grafana/grafana-enterprise:latest |
+| grafana-alloy | grafana/alloy:latest |
+| grafana-loki | grafana/loki:latest |
+| grafana-mimir | grafana/mimir:latest |
+| grafana-mimir-memcached | memcached |
+| grafana-pyroscope | grafana/pyroscope:latest |
+| grafana-tempo | grafana/tempo:latest |
+| guacamole | flcontainers/guacamole:latest |
+| homepage | ghcr.io/gethomepage/homepage:latest |
+| hortusfox | ghcr.io/danielbrendel/hortusfox-web:latest |
+| hugo | hugomods/hugo:exts |
+| invidious | quay.io/invidious/invidious:latest |
+| invidious-db | docker.io/library/postgres:14 |
+| invoice_ninja | invoiceninja/invoiceninja:5 |
+| invoice_ninja_proxy | nginx |
+| it-tools | ghcr.io/corentinth/it-tools:latest |
+| jellyfin | jellyfin/jellyfin |
+| jitsi-etherpad | etherpad/etherpad:1.8.6 |
+| jitsi-jibri | jitsi/jibri:stable |
+| jitsi-jicofo | jitsi/jicofo:stable |
+| jitsi-jigasi | jitsi/jigasi:stable |
+| jitsi-jvb | jitsi/jvb:stable |
+| jitsi-prosody | jitsi/prosody:stable |
+| jitsi-web | jitsi/web:stable |
+| joplin-db | postgres:17-alpine |
+| joplin | joplin/server:latest |
+| komodo-core | ghcr.io/mbecker20/komodo:latest |
+| komodo-ferretdb | ghcr.io/ferretdb/ferretdb |
+| komodo-periphery | ghcr.io/mbecker20/periphery:latest |
+| komodo-pg-db | postgres:17-alpine |
+| librespeed | lscr.io/linuxserver/librespeed:latest |
+| lidarr | lscr.io/linuxserver/lidarr:latest |
+| lidify | thewicklowwolf/lidify:latest |
+| lldap | lldap/lldap:stable |
+| localai | localai/localai:latest-aio-cpu |
+| maloja | krateng/maloja:latest |
+| mariadb | ghcr.io/linuxserver/mariadb |
+| mastodon-pg-db | postgres:17-alpine |
+| minio | minio/minio |
+| mongodb | mongo:7.0 |
+| multi-scrobbler | foxxmd/multi-scrobbler |
+| n8n | docker.n8n.io/n8nio/n8n |
+| navidrome | deluan/navidrome:latest |
+| netbox | lscr.io/linuxserver/netbox:latest |
+| netbox-db | postgres:17-alpine |
+| nextcloud | lscr.io/linuxserver/nextcloud:latest |
+| ollama | ollama/ollama |
+| ombi | lscr.io/linuxserver/ombi:latest |
+| paperless-ngx | ghcr.io/paperless-ngx/paperless-ngx:latest |
+| plausible | ghcr.io/plausible/community-edition:v2.1.0 |
+| plausible_db | postgres:16-alpine |
+| plausible_events_db | clickhouse/clickhouse-server:24.3.3.102-alpine |
+| postal-smtp | ghcr.io/postalserver/postal:latest |
+| postal-web | ghcr.io/postalserver/postal:latest |
+| postal-worker | ghcr.io/postalserver/postal:latest |
+| prowlarr | lscr.io/linuxserver/prowlarr:latest |
+| radarec | thewicklowwolf/radarec:latest |
+| radarr | lscr.io/linuxserver/radarr:latest |
+| reactive-resume | amruthpillai/reactive-resume:latest |
+| reactive-resume-pg | postgres:16-alpine |
+| readarr | lscr.io/linuxserver/readarr:develop |
+| redis | redis:alpine |
+| redlib | quay.io/redlib/redlib:latest |
+| sabnzbdvpn | ghcr.io/binhex/arch-sabnzbdvpn:latest |
+| scraperr | jpyles0524/scraperr:latest |
+| scraperr-api | jpyles0524/scraperr_api:latest |
+| scrutiny | ghcr.io/analogj/scrutiny:master-omnibus |
+| searxng | searxng/searxng:latest |
+| semaphore | semaphoreui/semaphore:v2.10.32 |
+| slurpit-portal | slurpit/portal:latest |
+| slurpit-scanner | slurpit/scanner:latest |
+| slurpit-scraper | slurpit/scraper:latest |
+| slurpit-warehouse | slurpit/warehouse:latest |
+| sonarqube | mc1arke/sonarqube-with-community-branch-plugin:lts |
+| sonarqube-pg-db | postgres:17-alpine |
+| sonarr | lscr.io/linuxserver/sonarr:latest |
+| sonashow | thewicklowwolf/sonashow:latest |
+| soularr | mrusse08/soularr:latest |
+| soulseek | slskd/slskd |
+| spotisub | blastbeng/spotisub:latest |
+| swag | lscr.io/linuxserver/swag:latest |
+| synapse | docker.io/matrixdotorg/synapse:latest |
+| synapse-db | postgres:16-alpine |
+| tandoor | vabene1111/recipes |
+| tandoor-pg | postgres:16-alpine |
+| traccar | traccar/traccar:latest |
+| traccar-pg | postgres:16-alpine |
+| unmanic | josh5/unmanic:latest |
+| uptimekuma | louislam/uptime-kuma:latest |
+| vault | hashicorp/vault:latest |
+| wallabag | wallabag/wallabag |
+| wallos | bellamy/wallos:latest |
+| watchtower | ghcr.io/containrrr/watchtower:latest |
+| wazuh.agent | opennix/wazuh-agent:latest |
+| wazuh.dashboard | wazuh/wazuh-dashboard: |
+| wazuh.indexer | wazuh/wazuh-indexer: |
+| wazuh.manager | wazuh/wazuh-manager: |
+| web-check | lissy93/web-check |
+| whodb | clidey/whodb |
+| your_spotify | lscr.io/linuxserver/your_spotify:latest |
+| youtubedl | nbr23/youtube-dl-server:latest |
+| zammad-backup | postgres: |
+| zammad-elasticsearch | bitnami/elasticsearch: |
+| zammad-init | : |
+| zammad-memcached | memcached: |
+| zammad-nginx | : |
+| zammad-postgresql | postgres: |
+| zammad-railsserver | : |
+| zammad-redis | redis: |
+| zammad-scheduler | : |
+| zammad-websocket | : |
+| zitadel | ghcr.io/zitadel/zitadel:latest |
+| zitadel-pg-db | postgres:16-alpine |
+
@@ -1,2 +0,0 @@
-sonar.projectKey=rinoa-docker
-sonar.analysis.sqbot=