142 lines
3.2 KiB
YAML
142 lines
3.2 KiB
YAML
---
|
|
kind: secret
|
|
name: password_authelia
|
|
get:
|
|
path: secret/data/authelia/ssh
|
|
name: root
|
|
|
|
---
|
|
kind: secret
|
|
name: password_matrix
|
|
get:
|
|
path: secret/data/matrix/bot/drone-bot
|
|
name: password
|
|
---
|
|
kind: secret
|
|
name: userid_matrix
|
|
get:
|
|
path: secret/data/matrix/bot/drone-bot
|
|
name: userid
|
|
---
|
|
kind: secret
|
|
name: roomid_matrix
|
|
get:
|
|
path: secret/data/matrix/bot/drone-bot
|
|
name: roomid
|
|
|
|
|
|
---
|
|
kind: pipeline
|
|
name: authelia_check
|
|
|
|
trigger:
|
|
event:
|
|
- pull_request
|
|
- push
|
|
|
|
steps:
|
|
- name: ssh-check
|
|
image: appleboy/drone-ssh
|
|
settings:
|
|
host: 10.0.4.18
|
|
username: root
|
|
password:
|
|
from_secret: password_authelia
|
|
port: 22
|
|
# Hier liegt der Schlüssel:
|
|
# Wir sagen dem Plugin, es soll die Variable 'args' (aus der UI)
|
|
# und 'DRONE_BUILD_EVENT' in die SSH-Session exportieren.
|
|
envs:
|
|
- args
|
|
- DRONE_BUILD_EVENT
|
|
script: |
|
|
# In der SSH-Session ist die Variable nun so verfügbar,
|
|
# wie du sie in der UI benannt hast.
|
|
echo "[INFO] Event: $DRONE_BUILD_EVENT"
|
|
echo "[INFO] Parameter: $args"
|
|
|
|
fetch -o /tmp/authelia-update.sh https://git.familie-berner.de/Open/infra-maintenance/raw/branch/main/authelia/authelia-update.sh
|
|
chmod +x /tmp/authelia-update.sh
|
|
|
|
# Ausführen. Falls $args leer ist, passiert nichts Schlimmes.
|
|
/tmp/authelia-update.sh $args
|
|
|
|
---
|
|
kind: pipeline
|
|
type: docker
|
|
name: authelia_apply
|
|
|
|
trigger:
|
|
event:
|
|
- custom
|
|
- cron
|
|
|
|
steps:
|
|
- name: ssh-check
|
|
image: appleboy/drone-ssh
|
|
settings:
|
|
host: 10.0.4.18
|
|
username: root
|
|
password:
|
|
from_secret: password_authelia
|
|
port: 22
|
|
# Hier liegt der Schlüssel:
|
|
# Wir sagen dem Plugin, es soll die Variable 'args' (aus der UI)
|
|
# und 'DRONE_BUILD_EVENT' in die SSH-Session exportieren.
|
|
envs:
|
|
- args
|
|
- DRONE_BUILD_EVENT
|
|
script: |
|
|
# In der SSH-Session ist die Variable nun so verfügbar,
|
|
# wie du sie in der UI benannt hast.
|
|
echo "[INFO] Event: $DRONE_BUILD_EVENT"
|
|
echo "[INFO] Parameter: $args"
|
|
|
|
fetch -o /tmp/authelia-update.sh https://git.familie-berner.de/Open/infra-maintenance/raw/branch/main/authelia/authelia-update.sh
|
|
chmod +x /tmp/authelia-update.sh
|
|
|
|
# Ausführen. Falls $args leer ist, passiert nichts Schlimmes.
|
|
/tmp/authelia-update.sh $args
|
|
|
|
---
|
|
kind: pipeline
|
|
name: matrix_message
|
|
|
|
depends_on:
|
|
- authelia_check
|
|
|
|
trigger:
|
|
status:
|
|
- failure
|
|
|
|
steps:
|
|
- name: notify
|
|
image: spotlightkid/drone-matrixchat-notify
|
|
settings:
|
|
homeserver: 'https://matrix.familie-berner.de'
|
|
roomid:
|
|
from_secret: roomid_matrix
|
|
userid:
|
|
from_secret: userid_matrix
|
|
password:
|
|
from_secret: password_matrix
|
|
markdown: 'yes'
|
|
template: |
|
|
**Authelia Update**
|
|
repo: `${DRONE_REPO}`
|
|
branch: `${DRONE_BRANCH}`
|
|
build: `#${DRONE_BUILD_NUMBER}`
|
|
status: **${DRONE_BUILD_STATUS}**
|
|
|
|
event: `${DRONE_BUILD_EVENT}`
|
|
commit: ${DRONE_COMMIT_LINK}
|
|
|
|
pr: `${DRONE_PULL_REQUEST}`
|
|
${DRONE_PULL_REQUEST_TITLE}
|
|
|
|
when:
|
|
branch:
|
|
- master
|
|
- main
|
|
|