Deploy MQTT test backend with private viewer and Gitea CI/CD

2026-10-08 14:48:53 +03:30
commit 71ef622b4f
70 changed files with 7123 additions and 0 deletions
@@ -0,0 +1,67 @@
+name: robot-market-mqtt5-test
+services:
+  broker:
+    image: eclipse-mosquitto:2.1.2-alpine@sha256:38c0da4f2ef84284d47b3b3eeea1cb3bdeabe81ee10caf0cd5c5ff61ee3ea408
+    user: "${BROKER_UID:-1883}:${BROKER_GID:-1883}"
+    entrypoint: ["/usr/sbin/mosquitto"]
+    command: ["-c", "/mosquitto/config/mosquitto.conf"]
+    restart: unless-stopped
+    stop_grace_period: 30s
+    ports:
+      - "${TLS_BIND_IP:-0.0.0.0}:${TLS_PORT:-8884}:8883"
+    volumes:
+      - type: bind
+        source: ./mosquitto.conf
+        target: /mosquitto/config/mosquitto.conf
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: ./acl
+        target: /mosquitto/config/acl
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: ./secrets/runtime
+        target: /run/mqtt-secrets
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: ./certs/server
+        target: /mosquitto/certs
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: ./data
+        target: /mosquitto/data
+        bind:
+          create_host_path: false
+      - type: bind
+        source: ./scripts/healthcheck.sh
+        target: /usr/local/bin/mqtt-healthcheck
+        read_only: true
+        bind:
+          create_host_path: false
+    read_only: true
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,size=8m,mode=1777
+      - /mosquitto/log:rw,noexec,nosuid,size=1m,mode=1777
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    mem_limit: 256m
+    cpus: 0.5
+    pids_limit: 64
+    logging:
+      driver: json-file
+      options:
+        max-size: "5m"
+        max-file: "3"
+    healthcheck:
+      test: ["CMD", "/bin/sh", "/usr/local/bin/mqtt-healthcheck"]
+      interval: 30s
+      timeout: 20s
+      start_period: 10s
+      retries: 3