asxpi/datacenterbingo
asxpi/datacenterbingo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

deploy: use Garage for object storage
All checks were successful
Build and Deploy to Production / test (push) Successful in 1m46s
Details
Build and Deploy to Production / build (push) Successful in 1m5s
Details
Build and Deploy to Production / deploy (push) Successful in 42s
Details

Browse source 
The storage stack replaces MinIO, abandoned upstream, with Garage. Point
the app at garage:3900.

Garage only accepts keys in its own format, so hash the existing
BINGO_S3_* secrets into it the way storage's bootstrap does. The secrets
stay as they are; a pair already in Garage's format is used unchanged.

Assisted-by: Claude:fable-5-2
This commit is contained in:
Sergei Poljanski 2026-11-11 03:44:42 +04:00
commit 475be2ece6
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

21
.forgejo/workflows/deploy.yaml
View file

@ -123,15 +123,30 @@ jobs:
script: | script: |
umask 077 umask 077
mkdir -p /opt/datacenterbingo mkdir -p /opt/datacenterbingo
# Garage only takes its own key format (id: GK + 24 hex digits,
# secret: 64 hex digits). Hash the MinIO-era secrets into it, as
# storage's init/garage-bootstrap.sh does; a pair already in
# Garage's format is used as it is.
garage_key_id() {
if printf '%s' "$1" | grep -Eq '^GK[0-9a-f]{24}$'; then printf '%s' "$1"
else printf 'GK%s' "$(printf '%s' "$1" | sha256sum | cut -c1-24)"; fi
}
garage_secret() {
if printf '%s' "$1" | grep -Eq '^[0-9a-f]{64}$'; then printf '%s' "$1"
else printf '%s' "$1" | sha256sum | cut -c1-64; fi
}
S3_ACCESS_KEY="$(garage_key_id "${BINGO_S3_ACCESS_KEY}")"
S3_SECRET_KEY="$(garage_secret "${BINGO_S3_SECRET_KEY}")"
cat > /opt/datacenterbingo/.env <<EOF cat > /opt/datacenterbingo/.env <<EOF
RACK_ENV=production RACK_ENV=production
BINGO_HOST=datacenterbingo.xyz BINGO_HOST=datacenterbingo.xyz
DATABASE_URL=postgres://bingo:${BINGO_DB_PASSWORD}@postgres:5432/asxpio DATABASE_URL=postgres://bingo:${BINGO_DB_PASSWORD}@postgres:5432/asxpio
S3_ENDPOINT=http://minio:9000 S3_ENDPOINT=http://garage:3900
S3_REGION=us-east-1 S3_REGION=us-east-1
S3_BUCKET=datacenterbingo-photos S3_BUCKET=datacenterbingo-photos
S3_ACCESS_KEY=${BINGO_S3_ACCESS_KEY} S3_ACCESS_KEY=${S3_ACCESS_KEY}
S3_SECRET_KEY=${BINGO_S3_SECRET_KEY} S3_SECRET_KEY=${S3_SECRET_KEY}
INDEXNOW_KEY=${INDEXNOW} INDEXNOW_KEY=${INDEXNOW}
EOF EOF
chmod 600 /opt/datacenterbingo/.env chmod 600 /opt/datacenterbingo/.env