Différences
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
| doc:forgejo [2025/02/27 07:41] – [Gestion des badbot] Zatalyz | doc:forgejo [2025/06/16 19:00] (Version actuelle) – [Installation] Deed | ||
|---|---|---|---|
| Ligne 199: | Ligne 199: | ||
| banaction = nftables-multiport | banaction = nftables-multiport | ||
| </ | </ | ||
| + | |||
| + | Et on active le service : | ||
| + | sudo systemctl enable fail2ban | ||
| + | sudo systemctl restart fail2ban | ||
| + | |||
| + | Pour voir quelles ips sont dans la jail : | ||
| + | sudo fail2ban-client status nginx-runner | ||
| + | |||
| + | =====RUNNER===== | ||
| + | ====Installation==== | ||
| + | Source: https:// | ||
| + | ===Dépendance=== | ||
| + | apt install wget | ||
| + | |||
| + | Installation de Docker: | ||
| + | |||
| + | Source: https:// | ||
| + | |||
| + | Ajoute la Clé GPG: | ||
| + | sudo apt update | ||
| + | sudo apt install ca-certificates curl | ||
| + | sudo install -m 0755 -d / | ||
| + | sudo curl -fsSL https:// | ||
| + | sudo chmod a+r / | ||
| + | |||
| + | Ajouter les sources: | ||
| + | echo \ | ||
| + | "deb [arch=$(dpkg --print-architecture) signed-by=/ | ||
| + | $(. / | ||
| + | sudo tee / | ||
| + | |||
| + | Installer Docker: | ||
| + | sudo apt update | ||
| + | sudo apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin | ||
| + | ===Config Daemon=== | ||
| + | |||
| + | Fichier Daemon: | ||
| + | [Unit] | ||
| + | Description=Forgejo Runner | ||
| + | Documentation=https:// | ||
| + | After=docker.service | ||
| + | | ||
| + | [Service] | ||
| + | ExecStart=forgejo-runner daemon --config / | ||
| + | ExecReload=/ | ||
| + | | ||
| + | # This user and working directory must already exist | ||
| + | User=runner | ||
| + | WorkingDirectory=/ | ||
| + | Restart=on-failure | ||
| + | TimeoutSec=0 | ||
| + | RestartSec=10 | ||
| + | | ||
| + | [Install] | ||
| + | |||
| + | Reload le systemd: | ||
| + | sudo systemctl daemon-reload | ||
| + | |||
| + | ===Télécharger et Installer=== | ||
| + | Télécharger: | ||
| + | export RUNNER_VERSION=$(curl -X ' | ||
| + | wget -O forgejo-runner https:// | ||
| + | chmod +x forgejo-runner | ||
| + | wget -O forgejo-runner.asc https:// | ||
| + | gpg --keyserver keys.openpgp.org --recv EB114F5E6C0DC2BCDD183550A4B61A2DC5923710 | ||
| + | gpg --verify forgejo-runner.asc forgejo-runner | ||
| + | |||
| + | Installer: | ||
| + | sudo cp forgejo-runner / | ||
| + | |||
| + | Configurer le Home: | ||
| + | useradd --create-home runner | ||
| + | usermod -aG docker runner | ||
| + | |||
| + | Configurer les dossiers dans le home: | ||
| + | sudo su - runner | ||
| + | |||
| + | mkdir -p data | ||
| + | touch data/ | ||
| + | mkdir -p data/.cache | ||
| + | |||
| + | chown -R 1001:1001 data/ | ||
| + | chown -R 1001:1001 data/.cache | ||
| + | chmod 775 data/ | ||
| + | chmod 775 data/.cache | ||
| + | chmod g+s data/ | ||
| + | chmod g+s data/.cache | ||
| + | |||
| + | Enregistrer le Runner: | ||
| + | sudo -u runner forgejo-runner register | ||
| + | |||
| + | |||
| + | Démarrer le Runner: | ||
| + | sudo service forgejo-runner start | ||
| + | ====Update==== | ||
| + | |||
| + | export RUNNER_VERSION=$(curl -X ' | ||
| + | wget -O forgejo-runner https:// | ||
| + | sudo service forgejo-runner stop | ||
| + | sudo chmod +x forgejo-runner | ||
| + | sudo cp forgejo-runner / | ||
| + | sudo service forgejo-runner start | ||
| + | |||
| + | |||
| + | |||
| {{tag> | {{tag> | ||