1
services:
2
  woodpecker-server:
3
    image: woodpeckerci/woodpecker-server:v3
4
    container_name: woodpecker-server
5
    restart: unless-stopped
6
    ports:
7
      - "8000:8000"   # Web UI + API
8
      - "9000:9000"   # gRPC (Agent 连接)
9
    volumes:
10
      - ./woodpecker-data:/var/lib/woodpecker/
11
    environment:
12
      - WOODPECKER_OPEN=true
13
      - WOODPECKER_HOST=http://192.168.1.100:8000
14
      - WOODPECKER_GITEA=true
15
      - WOODPECKER_GITEA_URL=http://192.168.1.100:3000
16
      - WOODPECKER_GITEA_CLIENT=4f8a7b2c-xxxx-xxxx-xxxx-xxxxxxxxxxxx
17
      - WOODPECKER_GITEA_SECRET=gto_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
18
      - WOODPECKER_AGENT_SECRET=<上一步生成的共享密钥>
19
      - WOODPECKER_ADMIN=your-gitea-username
20
    networks:
21
      - cicd
22

23
  woodpecker-agent:
24
    image: woodpeckerci/woodpecker-agent:v3
25
    container_name: woodpecker-agent
26
    restart: unless-stopped
27
    command: agent
28
    depends_on:
29
      - woodpecker-server
30
    volumes:
31
      - /var/run/docker.sock:/var/run/docker.sock
32
    environment:
33
      - WOODPECKER_SERVER=woodpecker-server:9000
34
      - WOODPECKER_AGENT_SECRET=<同上共享密钥>
35
      # - WOODPECKER_MAX_WORKFLOWS=2   # 默认 1，根据 CPU/内存调整
36
      - WOODPECKER_BACKEND_DOCKER_NETWORK=cicd
37
    networks:
38
      - cicd
39

40
networks:
41
  cicd:
42
    name: cicd
43
    external: true   # 需预先创建：docker network create cicd
44

45
volumes:
46
  woodpecker-data:

1
steps:
2
  - name: test
3
    image: node:22-alpine
4
    commands:
5
      - npm install
6
      - npm test

1
depends_on:
2
  - lint
3
  - test
4
  - build
5

6
steps:
7
  - name: deploy
8
    image: debian:stable-slim
9
    commands:
10
      - echo "deploying..."

1
services:
2
  postgres:
3
    image: postgres:16-alpine
4
    environment:
5
      - POSTGRES_USER=test
6
      - POSTGRES_PASSWORD=test
7
      - POSTGRES_DB=testdb
8

9
  redis:
10
    image: redis:7-alpine
11

12
steps:
13
  - name: test
14
    image: node:22-alpine
15
    commands:
16
      - npm ci
17
      - npm test
18
    environment:
19
      - DATABASE_URL=postgres://test:test@postgres:5432/testdb
20
      - REDIS_URL=redis://redis:6379

1
steps:
2
  - name: build
3
    image: node:22-alpine
4
    commands:
5
      - npm ci
6
      - npm run build
7

8
  - name: deploy
9
    image: debian:stable-slim
10
    commands:
11
      - apt-get update && apt-get install -y rsync openssh-client
12
      - mkdir -p ~/.ssh && echo "$${SSH_KEY}" > ~/.ssh/id_rsa && chmod 600 ~/.ssh/id_rsa
13
      - rsync -avz -e "ssh -o StrictHostKeyChecking=no" dist/ user@192.168.1.10:/var/www/html/
14
    environment:
15
      SSH_KEY:
16
        from_secret: deploy_ssh_key
17
    when:
18
      event: push
19
      branch: main

1
matrix:
2
  GO_VERSION:
3
    - 1.22
4
    - 1.23
5

6
steps:
7
  - name: test
8
    image: golang:${GO_VERSION}
9
    commands:
10
      - go vet ./...
11
      - go test -race -coverprofile=coverage.out ./...
12
      - go tool cover -func=coverage.out
13

14
  - name: build
15
    image: golang:${GO_VERSION}
16
    commands:
17
      - CGO_ENABLED=0 go build -ldflags="-s -w" -o app .
18

19
  - name: publish-image
20
    image: woodpeckerci/plugin-docker-buildx
21
    settings:
22
      repo: registry.example.com/myapp
23
      registry: registry.example.com
24
      dockerfile: Dockerfile
25
      platforms: linux/amd64,linux/arm64
26
      tags: latest
27
      auto_tag: true
28
      username:
29
        from_secret: registry_user
30
      password:
31
        from_secret: registry_pass
32
    when:
33
      event: push
34
      branch: main

1
when:
2
  - event: cron
3
    cron: daily-backup
4

5
steps:
6
  - name: backup-db
7
    image: postgres:16-alpine
8
    commands:
9
      - pg_dump -h $$DB_HOST -U $$DB_USER $$DB_NAME | gzip > backup-$(date +%Y%m%d).sql.gz
10
    environment:
11
      DB_HOST:
12
        from_secret: db_host
13
      DB_USER:
14
        from_secret: db_user
15
      DB_NAME:
16
        from_secret: db_name
17
      PGPASSWORD:
18
        from_secret: db_password

1
server {
2
    listen 443 ssl;
3
    server_name ci.example.com;
4

5
    ssl_certificate     /etc/ssl/certs/ci.example.com.pem;
6
    ssl_certificate_key /etc/ssl/private/ci.example.com.key;
7

8
    location / {
9
        proxy_pass http://127.0.0.1:8000;
10
        proxy_http_version 1.1;
11

12
        proxy_set_header Host              $host;
13
        proxy_set_header X-Real-IP         $remote_addr;
14
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
15
        proxy_set_header X-Forwarded-Proto $scheme;
16

17
        # WebSocket 支持（日志实时推流需要）
18
        proxy_set_header Upgrade    $http_upgrade;
19
        proxy_set_header Connection "upgrade";
20

21
        proxy_read_timeout 300s;
22
        proxy_send_timeout 300s;
23
    }
24
}

1
server {
2
    listen 443 ssl http2;
3
    server_name ci-grpc.example.com;
4

5
    ssl_certificate     /etc/ssl/certs/ci-grpc.example.com.pem;
6
    ssl_certificate_key /etc/ssl/private/ci-grpc.example.com.key;
7

8
    location / {
9
        grpc_pass grpc://127.0.0.1:9000;
10
    }
11
}