View Options

	diff --git a/roles/paas-docker/containers/phabricator.sls b/roles/paas-docker/containers/phabricator.sls
	index 2df2ee7..eb565ae 100644
	--- a/roles/paas-docker/containers/phabricator.sls
	+++ b/roles/paas-docker/containers/phabricator.sls
	@@ -1,85 +1,85 @@
	# -------------------------------------------------------------
	# Salt — Provision Docker engine
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
	# Project: Nasqueron
	# Created: 2018-09-06
	# License: Trivial work, not eligible to copyright
	# -------------------------------------------------------------

	{% set has_selinux = salt['grains.get']('selinux:enabled', False) %}
	{% set containers = pillar['docker_containers'][grains['id']] %}

	{% for instance, container in containers['phabricator'].items() %}
	{% set create_container = "skip_container" not in container or not container['skip_container'] %}

	# -------------------------------------------------------------
	# Storage directory
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	/srv/phabricator/{{ instance }}:
	file.directory:
	- user: 431
	- group: 433
	- makedirs: True

	{% if has_selinux %}
	selinux_context_{{ instance }}_data:
	selinux.fcontext_policy_present:
	- name: /srv/phabricator/{{ instance }}
	- sel_type: container_file_t

	selinux_context_{{ instance }}_data_applied:
	selinux.fcontext_policy_applied:
	- name: /srv/phabricator/{{ instance }}
	{% endif %}

	# -------------------------------------------------------------
	# Container
	#
	# /!\ DEVCENTRAL DEPLOYMENT ISSUE /!\
	#
	# We've currently a chicken or egg problem here: the zr
	# credentials source is the Nasqueron Phabricator instance,
	# DevCentral. As such, we can't provision it through this block.
	#
	# This is blocked by secrets migration to Vault.
	# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

	{% if create_container %}

	{{ instance }}:
	docker_container.running:
	- detach: True
	- interactive: True
	- image: nasqueron/phabricator
	- binds:
	- /srv/phabricator/{{ instance }}/conf:/opt/phabricator/conf
	- /srv/phabricator/{{ instance }}/repo:/var/repo
	- environment:
	PHABRICATOR_URL: https://{{ container['host'] }}
	PHABRICATOR_TITLE: {{ container['title'] }}
	PHABRICATOR_DOMAIN: {{ container['host'] }}
	PHABRICATOR_ALT_FILE_DOMAIN: https://{{ container['static_host'] }}

	DB_USER: {{ salt['zr.get_username'](container['credentials']['mysql']) }}
	DB_PASS: {{ salt['zr.get_password'](container['credentials']['mysql']) }}
	PHABRICATOR_STORAGE_NAMESPACE: {{ container['storage']['namespace'] }}

	{% if container['mailer'] == 'sendgrid' %}
	PHABRICATOR_USE_SENDGRID: 1
	PHABRICATOR_SENDGRID_APIUSER: {{ salt['zr.get_username'](container['credentials']['sendgrid']) }}
	PHABRICATOR_SENDGRID_APIKEY: {{ salt['zr.get_password'](container['credentials']['sendgrid']) }}
	{% elif container['mailer'] == 'mailgun' %}
	PHABRICATOR_USE_MAILGUN: 1
	PHABRICATOR_MAILGUN_APIKEY: {{ salt['zr.get_token'](container['credentials']['mailgun']) }}
	{% endif %}

	- links: {{ container['mysql_link'] }}:mysql
	- ports:
	- 80
	- - ports_bindings:
	+ - port_bindings:
	- {{ container['app_port'] }}:80

	{% endif %}

	{% endfor %}

File Metadata

Mime Type: text/x-diff
Expires: Sat, Oct 11, 20:45 (4 h, 46 m)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3063980
Default Alt Text: (3 KB)

No OneTemporary
Actions

View Options

File Metadata

Event Timeline

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions