taufiqpsumarna

#!/bin/bash

echo "Update repository and upgrade package"
apt update && apt upgrade -y

echo "Install Docker Package"
curl -fsSLv https://releases.rancher.com/install-docker/20.10.24.sh | sudo bash
sudo systemctl enable docker.service
sudo systemctl enable containerd.service

taufiqpsumarna

concurrent = 4
check_interval = 0

[[runners]]
  name = "gitlab-runner-autoscaler"
  url = "https://gitlab.com" #TODO_1: Change with your gitlab repository URL
  token = "" #TODO_2: Fill with your Gitlab Token
  executor = "docker+machine"
  limit = 4
  [runners.docker]

taufiqpsumarna

#!/bin/bash

echo "Update repository and upgrade package"
apt update && apt upgrade -y

echo "Install Docker Package"
curl -fsSLv https://releases.rancher.com/install-docker/24.0.9.sh | sudo bash
sudo systemctl enable docker.service
sudo systemctl enable containerd.service

taufiqpsumarna

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ecr:GetDownloadUrlForLayer",
                "ecr:BatchGetImage",
                "ecr:BatchCheckLayerAvailability",
                "ecr:PutImage",

taufiqpsumarna

server {
  listen 80;
  server_name <YOUR_DOMAIN_NAME>;  

  auth_basic "prometheus auth";
  auth_basic_user_file /etc/nginx/.htpasswd_prometheus; 

  location / {
    proxy_read_timeout 1800s;
    proxy_connect_timeout 1600s;

taufiqpsumarna

server {
  listen 80;
  server_name <YOUR_DOMAIN_NAME>;
  
  #Basic Auth
  auth_basic "loki auth";
  auth_basic_user_file /etc/nginx/.htpasswd_loki;

  location / {
    proxy_read_timeout 1800s;

taufiqpsumarna

prometheus.exporter.self "integrations_alloy" { }

discovery.relabel "integrations_alloy" {
  targets = prometheus.exporter.self.integrations_alloy.targets

  rule {
    target_label = "instance"
    replacement  = constants.hostname
  }

taufiqpsumarna

A quick note how to add a key from myKey.pem file to authorized keys on Linux.

The permissions for ~/.ssh/ folder should be 700. Permissions for authorized_keys file and myKey.pem are to be 600.

1.Generate a public key first (usually from AWS EC2 key)

ssh-keygen -y -f AnalyticsSharedKeyPair.pem > AnalyticsSharedKeyPair.pub

2.Add a new public key to authorized_keys:

taufiqpsumarna

# Stage 1: Build the application
FROM maven:3.9-eclipse-temurin-17-alpine AS build
WORKDIR /build
COPY . .
RUN mvn package

#Stage 2: Create the final lightweight image
FROM eclipse-temurin:17-jre-alpine
WORKDIR /app
COPY --from=build /build/target/hello-world.jar .

taufiqpsumarna

---
🔐 infisical-get-secret:
  image: taufiq14s/infisical-cli
  rules:
    - if: $CI_COMMIT_BRANCH == "main"
      variables:
        INFISICAL_ENVIRONMENT: prod
    - if: $CI_COMMIT_BRANCH == "staging"
      variables:
        INFISICAL_ENVIRONMENT: staging