Files
Frank Schwenk 3b182a0798 fix: deploy hook git pull without writable global config
Use git -c safe.directory instead of git config --global in the
container; set HOME=/tmp for deploy-hook.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-05 16:26:42 +02:00

45 lines
1.4 KiB
YAML

name: playground
services:
playground:
image: nginx
volumes:
- ./public:/usr/share/nginx/html:ro
- ./nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
- ./nginx/security-headers.conf:/etc/nginx/conf.d/security-headers.conf:ro
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.playground.rule=Host(`playground.schwenk.online`)"
- "traefik.http.routers.playground.entrypoints=websecure"
- "traefik.http.routers.playground.tls.certresolver=myresolver"
networks:
- traefik
deploy-hook:
build: ./deploy-hook
user: "${HOST_UID:-1000}:${HOST_GID:-1000}"
volumes:
- .:/repo
- ./hooks:/etc/webhook:ro
environment:
- HOME=/tmp
- WEBHOOK_SECRET=${WEBHOOK_SECRET}
- DEPLOY_GIT_TOKEN=${DEPLOY_GIT_TOKEN:-}
- DEPLOY_BRANCH=${DEPLOY_BRANCH:-main}
restart: unless-stopped
labels:
- "traefik.enable=true"
- "traefik.http.routers.playground-hook.rule=Host(`playground.schwenk.online`) && PathPrefix(`/hooks/`)"
- "traefik.http.routers.playground-hook.entrypoints=websecure"
- "traefik.http.routers.playground-hook.tls.certresolver=myresolver"
- "traefik.http.routers.playground-hook.priority=100"
- "traefik.http.services.playground-hook.loadbalancer.server.port=9000"
networks:
- traefik
networks:
traefik:
external: true