From 8af1a70535da2a96fad853b40439cf00f72cbb7a Mon Sep 17 00:00:00 2001 From: gxl Date: Fri, 5 Jun 2026 15:29:26 +0800 Subject: [PATCH] =?UTF-8?q?feat(infra):=20=E9=85=8D=E7=BD=AE=20Woodpecker?= =?UTF-8?q?=20CI=20=E5=92=8C=20Gitea=20=E7=9A=84=20HTTPS=20=E4=BB=A3?= =?UTF-8?q?=E7=90=86=E5=8F=8A=20Nexus=20=E5=88=9D=E5=A7=8B=E5=8C=96?= =?UTF-8?q?=E8=84=9A=E6=9C=AC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 添加 Nexus 数据目录初始化脚本并设置正确的用户权限 - 配置 Woodpecker 与 Gitea 集成的 HTTPS 代理服务器 - 设置 Gitea 和 Woodpecker 的 SSL 证书和反向代理规则 - 更新 Woodpecker 配置以支持 HTTPS 并移除过时的 Gitea 认证信息 --- dockercompose/nexus/cmd.sh | 4 ++++ dockercompose/woodpecker/docker-compose.yml | 7 +------ .../conf.d/gitea.lovestory.cyou.conf-https | 18 ++++++++++++++++++ .../woodpecker.lovestory.cyou.conf-https | 18 ++++++++++++++++++ 4 files changed, 41 insertions(+), 6 deletions(-) create mode 100644 dockercompose/nexus/cmd.sh create mode 100644 nginx/conf/conf.d/gitea.lovestory.cyou.conf-https create mode 100644 nginx/conf/conf.d/woodpecker.lovestory.cyou.conf-https diff --git a/dockercompose/nexus/cmd.sh b/dockercompose/nexus/cmd.sh new file mode 100644 index 0000000..9cc0d99 --- /dev/null +++ b/dockercompose/nexus/cmd.sh @@ -0,0 +1,4 @@ +#!/bin/bash +# 启动nexus需要先给目录权限否则启动不了 +mkdir nexus-data +chown -R 200:200 nexus-data diff --git a/dockercompose/woodpecker/docker-compose.yml b/dockercompose/woodpecker/docker-compose.yml index a1693a4..a7ead35 100644 --- a/dockercompose/woodpecker/docker-compose.yml +++ b/dockercompose/woodpecker/docker-compose.yml @@ -17,15 +17,10 @@ services: # - WOODPECKER_GITHUB_SECRET=2157f7be71f2a6c91d6a859c622a29b1e1af3951 - WOODPECKER_GITEA=true - - WOODPECKER_GITEA_URL=http://gitea.lovestory.cyou + - WOODPECKER_GITEA_URL=https://gitea.lovestory.cyou - WOODPECKER_GITEA_CLIENT=718dc249-2edc-4edd-8bc9-06ba569c2007 - WOODPECKER_GITEA_SECRET=gto_zovinkqbrekitnhoiez5376dhzkccvz7253ndyaxqjq2gcb2okdq - - # 👇 关键：特权插件白名单环境变量必须配置在 Agent 端，而不是 Server 端 - - WOODPECKER_PLUGINS_PRIVILEGED=*,plugins/docker,docker.io/plugins/docker,plugins/docker:latest,docker.m.daocloud.io/appleboy/drone-docker-compose - - woodpecker-agent: image: woodpeckerci/woodpecker-agent:v3 # v3 版本中，通常不需要显式写 command: agent，镜像默认就是 agent 运行 diff --git a/nginx/conf/conf.d/gitea.lovestory.cyou.conf-https b/nginx/conf/conf.d/gitea.lovestory.cyou.conf-https new file mode 100644 index 0000000..1457fb1 --- /dev/null +++ b/nginx/conf/conf.d/gitea.lovestory.cyou.conf-https @@ -0,0 +1,18 @@ +server { + listen 443 ssl; + server_name gitea.lovestory.cyou; + + ssl_certificate /etc/nginx/cert/gitea.lovestory.cyou.pem; + ssl_certificate_key /etc/nginx/cert/gitea.lovestory.cyou.key; + + client_max_body_size 0; + chunked_transfer_encoding on; + + location / { + proxy_pass http://172.29.114.102:3000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header REMOTE-HOST $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + } +} \ No newline at end of file diff --git a/nginx/conf/conf.d/woodpecker.lovestory.cyou.conf-https b/nginx/conf/conf.d/woodpecker.lovestory.cyou.conf-https new file mode 100644 index 0000000..e3f49af --- /dev/null +++ b/nginx/conf/conf.d/woodpecker.lovestory.cyou.conf-https @@ -0,0 +1,18 @@ +server { + listen 443 ssl; + server_name woodpecker.lovestory.cyou; + + ssl_certificate /etc/nginx/cert/woodpecker.lovestory.cyou.pem; + ssl_certificate_key /etc/nginx/cert/woodpecker.lovestory.cyou.key; + + client_max_body_size 0; + chunked_transfer_encoding on; + + location / { + proxy_pass http://172.29.114.102:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header REMOTE-HOST $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + } +} \ No newline at end of file