chore: Update deployment configuration and documentation
- Update Gitea configuration (remove DEFAULT_ACTIONS_URL) - Fix deployment documentation - Update Ansible playbooks - Clean up deprecated files - Add new deployment scripts and templates
This commit is contained in:
183
scripts/setup-secrets-interactive.sh
Executable file
183
scripts/setup-secrets-interactive.sh
Executable file
@@ -0,0 +1,183 @@
|
||||
#!/bin/bash
|
||||
# Interaktives Script zum Setzen der Gitea Secrets via API
|
||||
# Fragt nach Token falls nicht vorhanden
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Repository Info aus git remote
|
||||
REPO_FULL=$(git remote get-url origin 2>/dev/null | sed -E 's/.*[:/]([^/]+)\/([^/]+)\.git$/\1\/\2/' || echo "michael/michaelschiemer")
|
||||
REPO_OWNER=$(echo "$REPO_FULL" | cut -d'/' -f1)
|
||||
REPO_NAME=$(echo "$REPO_FULL" | cut -d'/' -f2)
|
||||
|
||||
GITEA_URL="${GITEA_URL:-https://git.michaelschiemer.de}"
|
||||
GITEA_TOKEN="${GITEA_TOKEN:-}"
|
||||
|
||||
# Colors
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m'
|
||||
|
||||
echo -e "${BLUE}════════════════════════════════════════════════════════════${NC}"
|
||||
echo -e "${BLUE}Gitea Repository Secrets Setup via API${NC}"
|
||||
echo -e "${BLUE}════════════════════════════════════════════════════════════${NC}"
|
||||
echo ""
|
||||
echo -e "Repository: ${GREEN}${REPO_OWNER}/${REPO_NAME}${NC}"
|
||||
echo -e "Gitea URL: ${GREEN}${GITEA_URL}${NC}"
|
||||
echo ""
|
||||
|
||||
# Prüfe ob Token vorhanden
|
||||
if [ -z "$GITEA_TOKEN" ]; then
|
||||
echo -e "${YELLOW}⚠️ GITEA_TOKEN nicht gefunden${NC}"
|
||||
echo ""
|
||||
echo -e "${BLUE}Du musst zuerst einen Gitea Access Token erstellen:${NC}"
|
||||
echo ""
|
||||
echo "1. Öffne im Browser:"
|
||||
echo -e " ${GREEN}${GITEA_URL}/user/settings/applications${NC}"
|
||||
echo ""
|
||||
echo "2. Scrolle zu 'Generate New Token'"
|
||||
echo ""
|
||||
echo "3. Konfiguration:"
|
||||
echo " - Name: z.B. 'CI/CD Secrets Setup'"
|
||||
echo " - Scopes: ✅ write:repository (mindestens)"
|
||||
echo ""
|
||||
echo "4. Klicke 'Generate Token'"
|
||||
echo ""
|
||||
echo "5. Kopiere den Token (wird nur einmal angezeigt!)"
|
||||
echo ""
|
||||
echo -e "${YELLOW}Dann füge den Token hier ein (wird nicht angezeigt):${NC}"
|
||||
read -s -p "Gitea Token: " GITEA_TOKEN
|
||||
echo ""
|
||||
echo ""
|
||||
fi
|
||||
|
||||
# Funktion zum Setzen eines Secrets
|
||||
set_secret() {
|
||||
local secret_name=$1
|
||||
local secret_value=$2
|
||||
|
||||
echo -n "Setting $secret_name... "
|
||||
|
||||
local response=$(curl -s -w "\n%{http_code}" \
|
||||
-X PUT \
|
||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
||||
-H "Content-Type: application/json" \
|
||||
"${GITEA_URL}/api/v1/repos/${REPO_OWNER}/${REPO_NAME}/actions/secrets/${secret_name}" \
|
||||
-d "{
|
||||
\"data\": \"${secret_value}\"
|
||||
}" 2>&1)
|
||||
|
||||
local http_code=$(echo "$response" | tail -n1)
|
||||
local body=$(echo "$response" | sed '$d')
|
||||
|
||||
if [ "$http_code" = "204" ] || [ "$http_code" = "201" ]; then
|
||||
echo -e "${GREEN}✅ OK${NC}"
|
||||
return 0
|
||||
elif [ "$http_code" = "404" ]; then
|
||||
echo -e "${RED}❌ Repository nicht gefunden (404)${NC}"
|
||||
echo " Prüfe: REPO_OWNER=${REPO_OWNER}, REPO_NAME=${REPO_NAME}"
|
||||
return 1
|
||||
elif [ "$http_code" = "403" ]; then
|
||||
echo -e "${RED}❌ Keine Berechtigung (403)${NC}"
|
||||
echo " Token benötigt 'write:repository' Scope"
|
||||
return 1
|
||||
elif [ "$http_code" = "401" ]; then
|
||||
echo -e "${RED}❌ Ungültiger Token (401)${NC}"
|
||||
return 1
|
||||
else
|
||||
echo -e "${RED}❌ FAILED (HTTP $http_code)${NC}"
|
||||
echo "Response: $body"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Prüfe Token-Gültigkeit
|
||||
echo -e "${BLUE}Prüfe Token-Gültigkeit...${NC}"
|
||||
TOKEN_CHECK=$(curl -s -o /dev/null -w "%{http_code}" \
|
||||
-H "Authorization: token ${GITEA_TOKEN}" \
|
||||
"${GITEA_URL}/api/v1/user" 2>&1)
|
||||
|
||||
if [ "$TOKEN_CHECK" != "200" ]; then
|
||||
echo -e "${RED}❌ Token ist ungültig oder hat keine ausreichenden Berechtigungen${NC}"
|
||||
echo "HTTP Status: $TOKEN_CHECK"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo -e "${GREEN}✅ Token ist gültig${NC}"
|
||||
echo ""
|
||||
|
||||
# Registry Password
|
||||
REGISTRY_PASSWORD="${REGISTRY_PASSWORD:-registry-secure-password-2025}"
|
||||
|
||||
# SSH Private Key
|
||||
SSH_KEY_PATH="${SSH_KEY_PATH:-$HOME/.ssh/production}"
|
||||
if [ -f "$SSH_KEY_PATH" ]; then
|
||||
SSH_PRIVATE_KEY=$(cat "$SSH_KEY_PATH")
|
||||
echo -e "${GREEN}✓ SSH private key gefunden: ${SSH_KEY_PATH}${NC}"
|
||||
else
|
||||
echo -e "${YELLOW}⚠️ SSH private key nicht gefunden: ${SSH_KEY_PATH}${NC}"
|
||||
echo ""
|
||||
read -p "SSH Key Pfad (oder Enter für Skip): " custom_ssh_path
|
||||
if [ -n "$custom_ssh_path" ] && [ -f "$custom_ssh_path" ]; then
|
||||
SSH_PRIVATE_KEY=$(cat "$custom_ssh_path")
|
||||
echo -e "${GREEN}✓ SSH private key geladen${NC}"
|
||||
else
|
||||
echo -e "${YELLOW}⚠️ Überspringe SSH_PRIVATE_KEY${NC}"
|
||||
SSH_PRIVATE_KEY=""
|
||||
fi
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo -e "${BLUE}Setze Secrets für Repository: ${REPO_OWNER}/${REPO_NAME}${NC}"
|
||||
echo ""
|
||||
|
||||
# Setze Secrets
|
||||
ERRORS=0
|
||||
|
||||
echo -e "${BLUE}Secret 1/3: REGISTRY_USER${NC}"
|
||||
if set_secret "REGISTRY_USER" "admin"; then
|
||||
echo ""
|
||||
else
|
||||
ERRORS=$((ERRORS + 1))
|
||||
fi
|
||||
|
||||
echo -e "${BLUE}Secret 2/3: REGISTRY_PASSWORD${NC}"
|
||||
if set_secret "REGISTRY_PASSWORD" "$REGISTRY_PASSWORD"; then
|
||||
echo ""
|
||||
else
|
||||
ERRORS=$((ERRORS + 1))
|
||||
fi
|
||||
|
||||
if [ -n "$SSH_PRIVATE_KEY" ]; then
|
||||
echo -e "${BLUE}Secret 3/3: SSH_PRIVATE_KEY${NC}"
|
||||
# Escape JSON special characters
|
||||
SSH_PRIVATE_KEY_ESCAPED=$(echo "$SSH_PRIVATE_KEY" | sed 's/\\/\\\\/g' | sed 's/"/\\"/g' | sed ':a;N;$!ba;s/\n/\\n/g')
|
||||
if set_secret "SSH_PRIVATE_KEY" "$SSH_PRIVATE_KEY_ESCAPED"; then
|
||||
echo ""
|
||||
else
|
||||
ERRORS=$((ERRORS + 1))
|
||||
fi
|
||||
else
|
||||
echo -e "${YELLOW}⚠️ Überspringe SSH_PRIVATE_KEY (nicht gefunden)${NC}"
|
||||
echo ""
|
||||
fi
|
||||
|
||||
# Zusammenfassung
|
||||
echo -e "${BLUE}════════════════════════════════════════════════════════════${NC}"
|
||||
if [ $ERRORS -eq 0 ]; then
|
||||
echo -e "${GREEN}✅ Secrets Setup erfolgreich abgeschlossen!${NC}"
|
||||
echo ""
|
||||
echo -e "Verifizierung:"
|
||||
echo -e " - Gehe zu: ${GREEN}${GITEA_URL}/${REPO_OWNER}/${REPO_NAME}/settings${NC}"
|
||||
echo -e " - Oder teste den Workflow: ${GREEN}Repository → Actions → Test Registry Credentials${NC}"
|
||||
exit 0
|
||||
else
|
||||
echo -e "${RED}❌ Fehler beim Setzen von $ERRORS Secret(s)${NC}"
|
||||
echo ""
|
||||
echo "Troubleshooting:"
|
||||
echo " - Prüfe Token-Berechtigungen (benötigt: write:repository)"
|
||||
echo " - Prüfe Repository-Name: ${REPO_OWNER}/${REPO_NAME}"
|
||||
echo " - Prüfe ob Actions für das Repository aktiviert ist"
|
||||
exit 1
|
||||
fi
|
||||
328
scripts/test-registry-credentials.sh
Executable file
328
scripts/test-registry-credentials.sh
Executable file
@@ -0,0 +1,328 @@
|
||||
#!/bin/bash
|
||||
#
|
||||
# Script zum Testen der Docker Registry Credentials
|
||||
# Testet sowohl HTTP als auch HTTPS Zugriff auf die Registry
|
||||
#
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Farben für Output
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# Default-Werte
|
||||
REGISTRY_USER="${REGISTRY_USER:-admin}"
|
||||
REGISTRY_PASSWORD="${REGISTRY_PASSWORD:-}"
|
||||
REGISTRY_DOMAIN="${REGISTRY_DOMAIN:-registry.michaelschiemer.de}"
|
||||
REGISTRY_HOST="${REGISTRY_HOST:-94.16.110.151}"
|
||||
REGISTRY_PORT="${REGISTRY_PORT:-5000}"
|
||||
|
||||
# Funktionen
|
||||
print_header() {
|
||||
echo ""
|
||||
echo -e "${BLUE}════════════════════════════════════════════════════════════${NC}"
|
||||
echo -e "${BLUE}$1${NC}"
|
||||
echo -e "${BLUE}════════════════════════════════════════════════════════════${NC}"
|
||||
echo ""
|
||||
}
|
||||
|
||||
print_success() {
|
||||
echo -e "${GREEN}✅ $1${NC}"
|
||||
}
|
||||
|
||||
print_error() {
|
||||
echo -e "${RED}❌ $1${NC}"
|
||||
}
|
||||
|
||||
print_warning() {
|
||||
echo -e "${YELLOW}⚠️ $1${NC}"
|
||||
}
|
||||
|
||||
print_info() {
|
||||
echo -e "${BLUE}ℹ️ $1${NC}"
|
||||
}
|
||||
|
||||
# Prüfe ob Docker verfügbar ist
|
||||
check_docker() {
|
||||
if ! command -v docker >/dev/null 2>&1; then
|
||||
print_error "Docker ist nicht installiert oder nicht im PATH"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if ! docker info >/dev/null 2>&1; then
|
||||
print_error "Docker daemon läuft nicht oder keine Berechtigung"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
print_success "Docker ist verfügbar"
|
||||
}
|
||||
|
||||
# Prüfe ob curl verfügbar ist
|
||||
check_curl() {
|
||||
if ! command -v curl >/dev/null 2>&1; then
|
||||
print_warning "curl ist nicht verfügbar, installiere..."
|
||||
if command -v apk >/dev/null 2>&1; then
|
||||
apk add --no-cache curl ca-certificates >/dev/null 2>&1
|
||||
elif command -v apt-get >/dev/null 2>&1; then
|
||||
apt-get update >/dev/null 2>&1 && apt-get install -y curl ca-certificates >/dev/null 2>&1
|
||||
else
|
||||
print_error "curl kann nicht automatisch installiert werden"
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
print_success "curl ist verfügbar"
|
||||
}
|
||||
|
||||
# Teste HTTP-Zugriff auf Registry
|
||||
test_http_connectivity() {
|
||||
local test_url="$1"
|
||||
print_info "Teste HTTP-Zugriff auf $test_url..."
|
||||
|
||||
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "http://${test_url}/v2/" 2>&1 || echo "000")
|
||||
|
||||
if [ "$HTTP_CODE" = "401" ]; then
|
||||
print_success "Registry erreichbar über HTTP (Status: 401 - Auth erforderlich, das ist gut!)"
|
||||
return 0
|
||||
elif [ "$HTTP_CODE" = "200" ]; then
|
||||
print_success "Registry erreichbar über HTTP (Status: 200 - keine Auth erforderlich)"
|
||||
return 0
|
||||
elif [ "$HTTP_CODE" = "000" ]; then
|
||||
print_error "Registry nicht erreichbar über HTTP (curl Fehler)"
|
||||
return 1
|
||||
else
|
||||
print_warning "Registry antwortet über HTTP (Status: $HTTP_CODE)"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Teste HTTPS-Zugriff auf Registry
|
||||
test_https_connectivity() {
|
||||
local test_url="$1"
|
||||
print_info "Teste HTTPS-Zugriff auf $test_url..."
|
||||
|
||||
HTTPS_CODE=$(curl -k -s -o /dev/null -w "%{http_code}" "https://${test_url}/v2/" 2>&1 || echo "000")
|
||||
|
||||
if [ "$HTTPS_CODE" = "401" ]; then
|
||||
print_success "Registry erreichbar über HTTPS (Status: 401 - Auth erforderlich, das ist gut!)"
|
||||
return 0
|
||||
elif [ "$HTTPS_CODE" = "200" ]; then
|
||||
print_success "Registry erreichbar über HTTPS (Status: 200 - keine Auth erforderlich)"
|
||||
return 0
|
||||
elif [ "$HTTPS_CODE" = "404" ]; then
|
||||
print_warning "Registry Route nicht gefunden über HTTPS (Status: 404)"
|
||||
print_info "Möglicherweise ist Traefik-Routing nicht richtig konfiguriert"
|
||||
return 1
|
||||
elif [ "$HTTPS_CODE" = "000" ]; then
|
||||
print_error "Registry nicht erreichbar über HTTPS (curl Fehler)"
|
||||
return 1
|
||||
else
|
||||
print_warning "Registry antwortet über HTTPS (Status: $HTTPS_CODE)"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Teste Docker Login
|
||||
test_docker_login() {
|
||||
local registry_url="$1"
|
||||
local use_http="${2:-false}"
|
||||
|
||||
print_info "Teste Docker Login bei $registry_url..."
|
||||
|
||||
if [ -z "$REGISTRY_PASSWORD" ]; then
|
||||
print_error "REGISTRY_PASSWORD ist nicht gesetzt!"
|
||||
print_info "Setze es mit: export REGISTRY_PASSWORD='dein-passwort'"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Docker Login versuchen
|
||||
set +e
|
||||
LOGIN_OUTPUT=$(echo "$REGISTRY_PASSWORD" | docker login "$registry_url" -u "$REGISTRY_USER" --password-stdin 2>&1)
|
||||
LOGIN_EXIT_CODE=$?
|
||||
set -e
|
||||
|
||||
if [ $LOGIN_EXIT_CODE -eq 0 ]; then
|
||||
print_success "Docker Login erfolgreich!"
|
||||
echo "$LOGIN_OUTPUT" | grep -i "Login Succeeded" || true
|
||||
return 0
|
||||
else
|
||||
print_error "Docker Login fehlgeschlagen (Exit Code: $LOGIN_EXIT_CODE)"
|
||||
|
||||
if echo "$LOGIN_OUTPUT" | grep -qi "unauthorized\|401"; then
|
||||
print_warning "Fehler: Unauthorized (401)"
|
||||
print_info "Die Credentials sind falsch:"
|
||||
print_info " - Username: $REGISTRY_USER"
|
||||
print_info " - Password Länge: ${#REGISTRY_PASSWORD} Zeichen"
|
||||
print_info ""
|
||||
print_info "Mögliche Lösungen:"
|
||||
print_info " 1. Prüfe REGISTRY_USER in Gitea Secrets (sollte 'admin' sein)"
|
||||
print_info " 2. Prüfe REGISTRY_PASSWORD in Gitea Secrets"
|
||||
print_info " 3. Prüfe das Passwort in deployment/stacks/registry/auth/htpasswd auf dem Server"
|
||||
fi
|
||||
|
||||
if echo "$LOGIN_OUTPUT" | grep -qi "HTTP response to HTTPS client"; then
|
||||
print_warning "Fehler: Docker versucht HTTPS, aber Registry läuft auf HTTP"
|
||||
print_info "Lösung: Docker-daemon muss mit --insecure-registry=$registry_url konfiguriert werden"
|
||||
fi
|
||||
|
||||
if echo "$LOGIN_OUTPUT" | grep -qi "certificate\|tls"; then
|
||||
print_warning "Fehler: SSL/TLS Problem"
|
||||
print_info "Lösung: Prüfe SSL-Zertifikat-Konfiguration"
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "Vollständiger Fehler-Output:"
|
||||
echo "$LOGIN_OUTPUT" | while IFS= read -r line; do
|
||||
echo " $line"
|
||||
done
|
||||
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Teste Registry API Zugriff
|
||||
test_registry_api() {
|
||||
local registry_url="$1"
|
||||
local protocol="${2:-http}"
|
||||
|
||||
print_info "Teste Registry API Zugriff über $protocol..."
|
||||
|
||||
API_URL="${protocol}://${registry_url}/v2/_catalog"
|
||||
|
||||
if [ "$protocol" = "https" ]; then
|
||||
API_RESPONSE=$(curl -k -u "${REGISTRY_USER}:${REGISTRY_PASSWORD}" -s "$API_URL" 2>&1)
|
||||
else
|
||||
API_RESPONSE=$(curl -u "${REGISTRY_USER}:${REGISTRY_PASSWORD}" -s "$API_URL" 2>&1)
|
||||
fi
|
||||
|
||||
if echo "$API_RESPONSE" | grep -qi "repositories"; then
|
||||
print_success "Registry API Zugriff erfolgreich!"
|
||||
echo "$API_RESPONSE" | jq '.' 2>/dev/null || echo "$API_RESPONSE"
|
||||
return 0
|
||||
elif echo "$API_RESPONSE" | grep -qi "unauthorized\|401"; then
|
||||
print_error "Registry API Zugriff fehlgeschlagen: Unauthorized"
|
||||
return 1
|
||||
else
|
||||
print_warning "Registry API Antwort: $API_RESPONSE"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Hauptfunktion
|
||||
main() {
|
||||
print_header "Docker Registry Credentials Test"
|
||||
|
||||
# Prüfungen
|
||||
check_docker
|
||||
check_curl
|
||||
|
||||
# Zeige Konfiguration
|
||||
print_info "Verwendete Konfiguration:"
|
||||
echo " REGISTRY_USER: $REGISTRY_USER"
|
||||
echo " REGISTRY_PASSWORD: ${REGISTRY_PASSWORD:+*** (${#REGISTRY_PASSWORD} Zeichen)}"
|
||||
echo " REGISTRY_DOMAIN: $REGISTRY_DOMAIN"
|
||||
echo " REGISTRY_HOST: $REGISTRY_HOST"
|
||||
echo " REGISTRY_PORT: $REGISTRY_PORT"
|
||||
|
||||
if [ -z "$REGISTRY_PASSWORD" ]; then
|
||||
print_error ""
|
||||
print_error "REGISTRY_PASSWORD ist nicht gesetzt!"
|
||||
print_info ""
|
||||
print_info "Verwendung:"
|
||||
echo " export REGISTRY_PASSWORD='dein-passwort'"
|
||||
echo " ./scripts/test-registry-credentials.sh"
|
||||
echo ""
|
||||
print_info "Oder in CI/CD:"
|
||||
echo " REGISTRY_PASSWORD=\"\${{ secrets.REGISTRY_PASSWORD }}\" ./scripts/test-registry-credentials.sh"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo ""
|
||||
|
||||
# Test-Ergebnisse
|
||||
HTTP_AVAILABLE=false
|
||||
HTTPS_AVAILABLE=false
|
||||
HTTP_LOGIN_SUCCESS=false
|
||||
HTTPS_LOGIN_SUCCESS=false
|
||||
|
||||
# Test 1: HTTP Connectivity
|
||||
print_header "Test 1: HTTP Connectivity"
|
||||
if test_http_connectivity "${REGISTRY_HOST}:${REGISTRY_PORT}"; then
|
||||
HTTP_AVAILABLE=true
|
||||
fi
|
||||
|
||||
# Test 2: HTTPS Connectivity
|
||||
print_header "Test 2: HTTPS Connectivity"
|
||||
if test_https_connectivity "$REGISTRY_DOMAIN"; then
|
||||
HTTPS_AVAILABLE=true
|
||||
fi
|
||||
|
||||
# Test 3: Docker Login über HTTP
|
||||
if [ "$HTTP_AVAILABLE" = true ]; then
|
||||
print_header "Test 3: Docker Login über HTTP"
|
||||
if test_docker_login "${REGISTRY_HOST}:${REGISTRY_PORT}" "http"; then
|
||||
HTTP_LOGIN_SUCCESS=true
|
||||
fi
|
||||
else
|
||||
print_warning "Überspringe HTTP Login Test (Registry nicht erreichbar)"
|
||||
fi
|
||||
|
||||
# Test 4: Docker Login über HTTPS
|
||||
if [ "$HTTPS_AVAILABLE" = true ]; then
|
||||
print_header "Test 4: Docker Login über HTTPS"
|
||||
if test_docker_login "$REGISTRY_DOMAIN" "https"; then
|
||||
HTTPS_LOGIN_SUCCESS=true
|
||||
fi
|
||||
else
|
||||
print_warning "Überspringe HTTPS Login Test (Registry nicht erreichbar)"
|
||||
fi
|
||||
|
||||
# Test 5: Registry API (nur wenn Login erfolgreich)
|
||||
if [ "$HTTP_LOGIN_SUCCESS" = true ] || [ "$HTTPS_LOGIN_SUCCESS" = true ]; then
|
||||
print_header "Test 5: Registry API Zugriff"
|
||||
|
||||
if [ "$HTTP_LOGIN_SUCCESS" = true ]; then
|
||||
test_registry_api "${REGISTRY_HOST}:${REGISTRY_PORT}" "http" || true
|
||||
fi
|
||||
|
||||
if [ "$HTTPS_LOGIN_SUCCESS" = true ]; then
|
||||
test_registry_api "$REGISTRY_DOMAIN" "https" || true
|
||||
fi
|
||||
fi
|
||||
|
||||
# Zusammenfassung
|
||||
print_header "Zusammenfassung"
|
||||
|
||||
if [ "$HTTP_LOGIN_SUCCESS" = true ] || [ "$HTTPS_LOGIN_SUCCESS" = true ]; then
|
||||
print_success "✅ Credentials sind korrekt und funktionieren!"
|
||||
|
||||
if [ "$HTTPS_LOGIN_SUCCESS" = true ]; then
|
||||
print_success "✅ HTTPS Login funktioniert (empfohlen)"
|
||||
print_info "Verwende in Workflows: registry.michaelschiemer.de"
|
||||
fi
|
||||
|
||||
if [ "$HTTP_LOGIN_SUCCESS" = true ]; then
|
||||
print_warning "⚠️ HTTP Login funktioniert (Fallback)"
|
||||
print_info "Verwende in Workflows: ${REGISTRY_HOST}:${REGISTRY_PORT}"
|
||||
print_info "HINWEIS: Benötigt insecure-registry Konfiguration im Docker-daemon"
|
||||
fi
|
||||
|
||||
exit 0
|
||||
else
|
||||
print_error "❌ Credentials funktionieren nicht!"
|
||||
print_info ""
|
||||
print_info "Nächste Schritte:"
|
||||
print_info "1. Prüfe REGISTRY_USER in Gitea Secrets"
|
||||
print_info "2. Prüfe REGISTRY_PASSWORD in Gitea Secrets"
|
||||
print_info "3. Prüfe das Passwort in deployment/stacks/registry/auth/htpasswd auf dem Server"
|
||||
print_info "4. Prüfe ob die Registry läuft: docker ps | grep registry"
|
||||
print_info "5. Prüfe Registry-Logs: docker logs registry"
|
||||
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Script ausführen
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user