mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
68680e863b
`docker stack deploy` ignores `depends_on`, so in swarm `init` started even when the `precheck` service exited 1. The stack then looked exactly as it did before #982: `init` hung, and `stack_ready.sh` reported "not converged" until all 600 retries of the convergence handler ran out. The single failed `precheck` task never turned fatal, because `has_fatal_task` needs three errors. `init` now runs `search_allocation_precheck.sh` in front of `zammad-init` as well. In compose the `precheck` service still stops `compose up` before `init` starts. In swarm, `init` keeps `restart: on-failure`, so a refusing Elasticsearch makes its tasks fail again and again. After three errors past `swarm_stack_fatal_grace` (180 s), `has_fatal_task` marks the service stuck and the deploy stops with the precheck output in the task report. Reported by CodeRabbit on #982. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
101 lines
4.9 KiB
YAML
101 lines
4.9 KiB
YAML
---
|
|
# nocheck: config-volume-secret Zammad's auto_wizard.json is consumed once at first boot and must carry the OIDC client secret inline; the wizard accepts no reference to a secret held elsewhere.
|
|
zammad_storage:
|
|
type: volume
|
|
mounts:
|
|
- service: websocket
|
|
target: &opt_zammad_storage_target /opt/zammad/storage
|
|
- service: scheduler
|
|
target: *opt_zammad_storage_target
|
|
- service: nginx
|
|
target: *opt_zammad_storage_target
|
|
- service: init
|
|
target: *opt_zammad_storage_target
|
|
- service: railsserver
|
|
target: *opt_zammad_storage_target
|
|
zammad_search:
|
|
type: volume
|
|
mounts:
|
|
- service: elasticsearch
|
|
target: /usr/share/elasticsearch/data
|
|
search_allocation_precheck:
|
|
type: config
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.config'), 'search_allocation_precheck.sh'] | path_join }}"
|
|
mode: "0555"
|
|
mounts:
|
|
- service: precheck
|
|
target: &usr_local_bin_search_allocation_precheck_sh_target /usr/local/bin/search_allocation_precheck.sh
|
|
- service: init
|
|
target: *usr_local_bin_search_allocation_precheck_sh_target
|
|
auto_wizard:
|
|
type: config
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.volumes'), 'auto_wizard.json'] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: init
|
|
target: &opt_zammad_auto_wizard_json_target /opt/zammad/auto_wizard.json
|
|
- service: railsserver
|
|
target: *opt_zammad_auto_wizard_json_target
|
|
zammad_omniauth_init:
|
|
type: bind
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.volumes'), 'zz_omniauth_allow_get.rb'] | path_join }}"
|
|
read_only: true
|
|
mounts:
|
|
- service: websocket
|
|
target: &opt_zammad_config_initializers_zz_omniauth_allow_get_rb_target /opt/zammad/config/initializers/zz_omniauth_allow_get.rb
|
|
- service: scheduler
|
|
target: *opt_zammad_config_initializers_zz_omniauth_allow_get_rb_target
|
|
- service: nginx
|
|
target: *opt_zammad_config_initializers_zz_omniauth_allow_get_rb_target
|
|
- service: railsserver
|
|
target: *opt_zammad_config_initializers_zz_omniauth_allow_get_rb_target
|
|
zammad_telegram_helper:
|
|
type: bind
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.volumes'), 'telegram_helper.rb'] | path_join }}"
|
|
read_only: true
|
|
mounts:
|
|
- service: websocket
|
|
target: &opt_zammad_lib_telegram_helper_rb_target /opt/zammad/lib/telegram_helper.rb
|
|
- service: scheduler
|
|
target: *opt_zammad_lib_telegram_helper_rb_target
|
|
- service: nginx
|
|
target: *opt_zammad_lib_telegram_helper_rb_target
|
|
- service: init
|
|
target: *opt_zammad_lib_telegram_helper_rb_target
|
|
- service: railsserver
|
|
target: *opt_zammad_lib_telegram_helper_rb_target
|
|
zammad_oidc_group_role_map:
|
|
type: bind
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.volumes'), 'zz_oidc_group_role_mapping.rb'] | path_join }}"
|
|
read_only: true
|
|
mounts:
|
|
- service: websocket
|
|
target: &opt_zammad_config_initializers_zz_oidc_group_role_mapping_rb_target /opt/zammad/config/initializers/zz_oidc_group_role_mapping.rb
|
|
when: "{{ lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool }}"
|
|
- service: scheduler
|
|
target: *opt_zammad_config_initializers_zz_oidc_group_role_mapping_rb_target
|
|
when: "{{ lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool }}"
|
|
- service: nginx
|
|
target: *opt_zammad_config_initializers_zz_oidc_group_role_mapping_rb_target
|
|
when: "{{ lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool }}"
|
|
- service: railsserver
|
|
target: *opt_zammad_config_initializers_zz_oidc_group_role_mapping_rb_target
|
|
when: "{{ lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool }}"
|
|
zammad_oidc_http_discovery:
|
|
type: bind
|
|
source: "{{ [lookup('container', 'web-app-zammad', 'directories.volumes'), 'zz_oidc_http_discovery.rb'] | path_join }}"
|
|
read_only: true
|
|
mounts:
|
|
- service: websocket
|
|
target: &opt_zammad_config_initializers_zz_oidc_http_discovery_rb_target /opt/zammad/config/initializers/zz_oidc_http_discovery.rb
|
|
when: "{{ (lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool) and not (lookup('tls', 'web-app-zammad', 'enabled') | bool) }}"
|
|
- service: scheduler
|
|
target: *opt_zammad_config_initializers_zz_oidc_http_discovery_rb_target
|
|
when: "{{ (lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool) and not (lookup('tls', 'web-app-zammad', 'enabled') | bool) }}"
|
|
- service: nginx
|
|
target: *opt_zammad_config_initializers_zz_oidc_http_discovery_rb_target
|
|
when: "{{ (lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool) and not (lookup('tls', 'web-app-zammad', 'enabled') | bool) }}"
|
|
- service: railsserver
|
|
target: *opt_zammad_config_initializers_zz_oidc_http_discovery_rb_target
|
|
when: "{{ (lookup('config', 'web-app-zammad', 'services.sso.enabled') | bool) and not (lookup('tls', 'web-app-zammad', 'enabled') | bool) }}"
|