TheSunIsLeaking/DorkNet
3
0
Fork 0
mirror of https://github.com/DorkSquadRR/DorkNet.git synced 2026-10-25 15:08:47 -07:00
Code Issues Packages Projects Releases Wiki Activity

ci: keep the agent's Jenkins URL and node secret runtime-only

Browse Source 
Coolify interpolates the compose file during the image build with only
build-time variables. Marking JENKINS_URL and JENKINS_SECRET required
(${VAR:?}) made the build fail when they are runtime-only, and making them
build-time would pass the node secret as a build argument.
This commit is contained in:
Alexa
2026-10-25 01:18:35 +03:00
parent cf3e6ea025
commit 3266ce47f3
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ci/jenkins/docker-compose.yml
+4 -2
View File
@@ -12,9 +12,11 @@ services:
environment: environment:
# Jenkins as seen from inside Docker (e.g. http://<jenkins container # Jenkins as seen from inside Docker (e.g. http://<jenkins container
# name>:8080), not the public URL, which is behind Cloudflare Access. # name>:8080), not the public URL, which is behind Cloudflare Access.
JENKINS_URL: ${JENKINS_URL:?set JENKINS_URL to Jenkins' internal address} # Both are needed at runtime only; keep them out of the image build so
# the node secret never reaches a build argument.
JENKINS_URL: ${JENKINS_URL}
JENKINS_AGENT_NAME: ${JENKINS_AGENT_NAME:-dorknet-builder} JENKINS_AGENT_NAME: ${JENKINS_AGENT_NAME:-dorknet-builder}
JENKINS_SECRET: ${JENKINS_SECRET:?set JENKINS_SECRET to the node secret} JENKINS_SECRET: ${JENKINS_SECRET}
JENKINS_WEB_SOCKET: "true" JENKINS_WEB_SOCKET: "true"
JENKINS_AGENT_WORKDIR: /home/jenkins/agent JENKINS_AGENT_WORKDIR: /home/jenkins/agent
# Where the stock builds live in the archive (restic repository folders # Where the stock builds live in the archive (restic repository folders