mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Update forgejo-runner
All checks were successful
ShellCheck / shellcheck (push) Successful in 15s
Details

Browse source
This commit is contained in:
Mathieu Strypsteen 2025-01-10 20:47:17 +01:00
parent 5e883d57be
commit 585d152b62
Signed by: mathieu
GPG key ID: 782A42E461BC6824
5 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
container-config/caddy/Caddyfile
View file

@ -34,6 +34,11 @@ strypsteen.me {
{"m.server": "matrix.strypsteen.com:443"} {"m.server": "matrix.strypsteen.com:443"}
EOF EOF
} }
strypsteen.com {
import base
import tls
respond 404
}
auth.strypsteen.com { auth.strypsteen.com {
import base import base
import tls import tls

2
sandbox/etc/containers/containers.conf.d/sandbox.conf Normal file
View file

@ -0,0 +1,2 @@
[containers]
userns="host"

1
sandbox/etc/containers/systemd/browserless.container
View file

@ -1,5 +1,6 @@
[Container] [Container]
Image=ghcr.io/browserless/chromium Image=ghcr.io/browserless/chromium
UserNS=auto
Tmpfs=/home/blessuser:mode=1777 Tmpfs=/home/blessuser:mode=1777
Environment=DEBUG=-* Environment=DEBUG=-*
PublishPort=3000:3000 PublishPort=3000:3000

1
sandbox/etc/containers/systemd/code-server.container
View file

@ -1,5 +1,6 @@
[Container] [Container]
Image=git.strypsteen.com/infra/code-server Image=git.strypsteen.com/infra/code-server
UserNS=auto
ReadOnly=false ReadOnly=false
AddDevice=/dev/kvm AddDevice=/dev/kvm
AddDevice=/dev/net/tun AddDevice=/dev/net/tun

3
sandbox/etc/containers/systemd/forgejo-runner.container
View file

@ -1,7 +1,8 @@
[Service] [Service]
Restart=on-failure Restart=on-failure
[Container] [Container]
Image=code.forgejo.org/forgejo/runner:5 Image=code.forgejo.org/forgejo/runner:6
UserNS=auto
SecurityLabelDisable=true SecurityLabelDisable=true
Exec=forgejo-runner daemon -c /etc/forgejo-runner/config.yaml Exec=forgejo-runner daemon -c /etc/forgejo-runner/config.yaml
Volume=/run/podman:/run/podman:U Volume=/run/podman:/run/podman:U