feat: additional shepherd config

.gitignore

@@ -5,6 +5,7 @@
 /**/swag
 /**/.env
 /**/.env.swarm
+/**/shepherd-registries
 /**/certs/**
 /**/*.log
 /**/authapi

docker-compose.yaml

@@ -4,19 +4,30 @@ x-restart-policy: &default-restart-policy
   window: 30s
 
 services:
+    gba-postgres:
+        deploy:
+            restart_policy: *default-restart-policy
+            labels:
+                - shepherd.auth.config=github
     gba-auth-server:
         depends_on:
             - gba-postgres
         deploy:
             restart_policy: *default-restart-policy
+            labels:
+                - shepherd.auth.config=github
     gba-admin-server:
         depends_on:
             - gba-postgres
         deploy:
             restart_policy: *default-restart-policy
+            labels:
+                - shepherd.auth.config=github
     gba-webserver:
         depends_on:
             - gba-auth-server
             - gba-admin-server
         deploy:
-            restart_policy: *default-restart-policy
+            restart_policy: *default-restart-policy
+            labels:
+                - shepherd.auth.config=github

shepherd/docker-compose.yaml

@@ -9,7 +9,15 @@ services:
                 constraints:
                     - node.role == manager
         environment:
-            - IGNORELIST_SERVICES=shepherd
-            - IMAGE_AUTOCLEAN_LIMIT=2
+            - IGNORELIST_SERVICES=gbajs3_shepherd
+            - IMAGE_AUTOCLEAN_LIMIT=1
             - ROLLBACK_ON_FAILURE=true
+            - WITH_REGISTRY_AUTH=true
+            - REGISTRIES_FILE=/var/run/secrets/shepherd-registries
+            - VERBOSE=true
         restart: always
+        secrets:
+            - shepherd-registries
+secrets:
+    shepherd-registries:
+        file: ./shepherd/shepherd-registries