Ansible Semaphore Infrastructure

This repository contains the deployment configuration for Ansible Semaphore and its associated PostgreSQL database. It assumes a pre-configured Docker host is already available.

Prerequisites

• A working Docker host (refer to the infra-notes repository for base host provisioning).
• Git installed on the host.

Deployment

1. Prepare the deployment directory and clone this repository:

sudo mkdir -p /opt/semaphore
sudo chown $USER:$USER /opt/semaphore
cd /opt/semaphore

git clone git@github.com:sdrwtf-labs/semaphore-deployment.git .

2. Generate

3. Create a .env file in this directory with the following variables:

## Host configuration
HOST_PORT=80
LOCAL_DNS=replace_with_local_dns

## Database credentials
DB_USER=semaphore
DB_NAME=semaphore
DB_PORT=5432
DB_PASS=replace_with_a_secure_password

## Semaphore Admin credentials
ADMIN_PASS=replace_with_a_secure_admin_password
ADMIN_NAME=Admin
ADMIN_USER=admin
ADMIN_EMAIL=admin@your-domain.local

## Semaphore Encryption Key
SEMAPHORE_ACCESS_KEY_ENCRYPTION=replace_with_generated_base64_key

## SMTP Configuration
SMTP_EMAIL_ALERT=false
SMTP_SECURE=true
SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_SENDER=notifications@example.com
# Comment out if user/password not needed
SMTP_USER=your_username
SMTP_PASS=your_smtp_password

## Telegram Bot Notifications
TELEGRAM_ALERT=false
TELEGRAM_TOKEN=replace_with_api_token
TELEGRAM_CHAT_ID=replace_with_chat_id

Note: If there are configuration issues, the config.json file in the container can be edited as follows:

# Enter the container
docker compose exec -it -u root semaphore sh

# Add nano
apk add nano

# Edit the config.json manually
nano /etc/semaphore/config.json

# Restart the container after exiting it with `exit`
docker compose down && docker compose up -d

3. Start the services:

docker compose up -d

Repository Structure

• compose.yaml: Docker service definitions.
• .gitignore: Ensures the .env file (containing secrets) is never pushed to GitHub.