Michael Schiemer
36ef2a1e2c
Some checks failed
🚀 Build & Deploy Image / Determine Build Necessity (push) Failing after 10m14s
🚀 Build & Deploy Image / Build Runtime Base Image (push) Has been skipped
🚀 Build & Deploy Image / Build Docker Image (push) Has been skipped
🚀 Build & Deploy Image / Run Tests & Quality Checks (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Staging (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Production (push) Has been skipped
Security Vulnerability Scan / Check for Dependency Changes (push) Failing after 11m25s
Security Vulnerability Scan / Composer Security Audit (push) Has been cancelled
- Remove middleware reference from Gitea Traefik labels (caused routing issues) - Optimize Gitea connection pool settings (MAX_IDLE_CONNS=30, authentication_timeout=180s) - Add explicit service reference in Traefik labels - Fix intermittent 504 timeouts by improving PostgreSQL connection handling Fixes Gitea unreachability via git.michaelschiemer.de
45 lines
1.3 KiB
Bash
Executable File
45 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# Script to extract CI_TOKEN (vault_git_token) from Ansible Vault
|
|
# Usage: ./scripts/get-ci-token-from-vault.sh
|
|
|
|
set -e
|
|
|
|
VAULT_FILE="deployment/ansible/secrets/production.vault.yml"
|
|
VAULT_PASS_FILE="deployment/ansible/.vault_pass"
|
|
|
|
# Check if vault file exists
|
|
if [ ! -f "$VAULT_FILE" ]; then
|
|
echo "Error: Vault file not found at $VAULT_FILE"
|
|
exit 1
|
|
fi
|
|
|
|
# Try to extract token
|
|
if [ -f "$VAULT_PASS_FILE" ]; then
|
|
# Use vault password file
|
|
TOKEN=$(ansible-vault view "$VAULT_FILE" --vault-password-file "$VAULT_PASS_FILE" 2>/dev/null | grep "vault_git_token:" | cut -d'"' -f2 || echo "")
|
|
elif command -v ansible-playbook >/dev/null 2>&1; then
|
|
# Try with ansible-playbook
|
|
TOKEN=$(cd deployment/ansible && ansible-playbook -i localhost, -c local /dev/stdin --vault-password-file .vault_pass 2>/dev/null <<EOF || echo ""
|
|
---
|
|
- hosts: localhost
|
|
gather_facts: no
|
|
vars_files:
|
|
- secrets/production.vault.yml
|
|
tasks:
|
|
- debug:
|
|
var: vault_git_token
|
|
EOF
|
|
)
|
|
TOKEN=$(echo "$TOKEN" | grep -oP "vault_git_token.*:\s*\K[^\s]+" || echo "")
|
|
else
|
|
echo "Error: Cannot extract token. Please provide vault password manually or set GITEA_TOKEN directly."
|
|
exit 1
|
|
fi
|
|
|
|
if [ -n "$TOKEN" ] && [ "$TOKEN" != "null" ] && [ "$TOKEN" != "undefined" ]; then
|
|
echo "$TOKEN"
|
|
else
|
|
echo "Error: Could not extract token from vault"
|
|
exit 1
|
|
fi
|