Concourse CI - Docker Compose 2022 Edition

docker-compose.yaml

version: '3'

services:
  concourse-db:
    image: postgres:14
    volumes: 
      - './concourse-db-data:/var/lib/postgresql/data'
    environment:
      POSTGRES_DB: concourse
      POSTGRES_USER: concourse
      POSTGRES_PASSWORD: very_secure_password
    restart: unless-stopped

  concourse-web:
    image: concourse/concourse
    command: web
    depends_on:
      - concourse-db
    volumes:
      - './concourse-web-keys:/concourse-keys'
    expose:  # for traefik
      - 8080
    ports:  # not for traefik
      - 8080:8080
    environment:
      CONCOURSE_ADD_LOCAL_USER: user:pass
      CONCOURSE_MAIN_TEAM_LOCAL_USER: user
      CONCOURSE_EXTERNAL_URL: https://concourse.example.com
      CONCOURSE_POSTGRES_HOST: concourse-db
      CONCOURSE_POSTGRES_PORT: 5432
      CONCOURSE_POSTGRES_DATABASE: concourse
      CONCOURSE_POSTGRES_USER: concourse
      CONCOURSE_POSTGRES_PASSWORD: very_secure_password
    restart: unless-stopped

  concourse-worker:
    image: concourse/concourse
    privileged: true
    command: worker
    volumes:
      - './concourse-worker-keys:/concourse-keys'
    environment:
      CONCOURSE_TSA_HOST: concourse-web:2222
      CONCOURSE_BAGGAGECLAIM_ADDRESS: concourse-worker
      CONCOURSE_BAGGAGECLAIM_FORWARD_ADDRESS: concourse-worker
      CONCOURSE_BAGGAGECLAIM_DRIVER: overlay
      CONCOURSE_CONTAINERD_DNS_SERVER: "8.8.8.8"
      CONCOURSE_RUNTIME: "containerd"
    restart: unless-stopped

generate_keys.sh

#!/bin/sh

mkdir -p concourse-web-keys concourse-worker-keys

ssh-keygen -t rsa -f concourse-web-keys/tsa_host_key -N ''
ssh-keygen -t rsa -f concourse-web-keys/session_signing_key -N ''
ssh-keygen -t rsa -f concourse-worker-keys/worker_key -N ''
cp concourse-worker-keys/worker_key.pub concourse-web-keys/authorized_worker_keys
cp concourse-web-keys/tsa_host_key.pub concourse-worker-keys/