Setup Semaphore

Setup Ansible Semaphore and deploy it behind the reverse proxy

Step 1: Create directory “semaphore” inside your git tracked directory

(U) Step 2: Create docker-compose.yml

Ensure to modify following in it:

MYSQL_PASSWORD in both mysql and semaphore. Ensure to use new but same password in both
SEMAPHORE_ADMIN_PASSWORD - autogenerate new password

version: '2'

services:

  mysql:
    image: mysql:latest
    hostname: mysql
    environment:
      MYSQL_RANDOM_ROOT_PASSWORD: 'yes'
      MYSQL_DATABASE: semaphore
      MYSQL_USER: semaphore
      MYSQL_PASSWORD: AsmbkicBcLCED9Ljv9vA
    volumes:
      - db:/var/lib/mysql  
    restart: unless-stopped  

  semaphore:
    image: semaphoreui/semaphore:latest 
    ports:
      - "10.10.10.10:3000:3000"    
    environment:
      SEMAPHORE_DB_DIALECT: mysql
      SEMAPHORE_DB_USER: semaphore
      SEMAPHORE_DB_PASS: AsmbkicBcLCED9Ljv9vA
      SEMAPHORE_DB_HOST: mysql
      SEMAPHORE_DB_PORT: 3306
      SEMAPHORE_DB: semaphore
      SEMAPHORE_ADMIN_PASSWORD: 6TtPhvFjmDSi
      SEMAPHORE_ADMIN_NAME: a01
      SEMAPHORE_ADMIN_EMAIL: anurag@demo.apnic56.anuragbhatia.com
      SEMAPHORE_ADMIN: a01
      ANSIBLE_HOST_KEY_CHECKING: "false"
    depends_on:
      - mysql
    volumes:
      - config:/etc/semaphore # config.json location      
    restart: unless-stopped  

volumes:
  db:
  config:

Once edited, deploy it using

docker-compose up -d

Ensure that ansible semaphore is running by looking at output of

docker container list -a | grep semaphore

Step 3: Reverse proxy it

Setup s01.apnic56.anuragbhatia.com to proxy 10.10.10.10:3000 in NGINX Proxy manager or Caddy (whatever you are using). Set it up with a valid TLS certificate and force SSL.