From 3266ce47f3bd5eb0f393ea00ac05bb7634114e7d Mon Sep 17 00:00:00 2001 From: Alexa <53471801+Alexa-RR@users.noreply.github.com> Date: Sun, 25 Oct 2026 01:18:35 +0300 Subject: [PATCH] ci: keep the agent's Jenkins URL and node secret runtime-only Coolify interpolates the compose file during the image build with only build-time variables. Marking JENKINS_URL and JENKINS_SECRET required (${VAR:?}) made the build fail when they are runtime-only, and making them build-time would pass the node secret as a build argument. --- ci/jenkins/docker-compose.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/ci/jenkins/docker-compose.yml b/ci/jenkins/docker-compose.yml index 93b97d0..c5d0707 100644 --- a/ci/jenkins/docker-compose.yml +++ b/ci/jenkins/docker-compose.yml @@ -12,9 +12,11 @@ services: environment: # Jenkins as seen from inside Docker (e.g. http://:8080), not the public URL, which is behind Cloudflare Access. - JENKINS_URL: ${JENKINS_URL:?set JENKINS_URL to Jenkins' internal address} + # Both are needed at runtime only; keep them out of the image build so + # the node secret never reaches a build argument. + JENKINS_URL: ${JENKINS_URL} JENKINS_AGENT_NAME: ${JENKINS_AGENT_NAME:-dorknet-builder} - JENKINS_SECRET: ${JENKINS_SECRET:?set JENKINS_SECRET to the node secret} + JENKINS_SECRET: ${JENKINS_SECRET} JENKINS_WEB_SOCKET: "true" JENKINS_AGENT_WORKDIR: /home/jenkins/agent # Where the stock builds live in the archive (restic repository folders