10 lines
691 B
YAML
10 lines
691 B
YAML
# Optional override for an SSH Git remote. Source paths are required absolute operator-managed
|
|
# files. Host-key checking remains strict; do not add a fallback known-hosts or key mount.
|
|
services:
|
|
core:
|
|
environment:
|
|
GIT_SSH_COMMAND: ssh -i /run/secrets/workspace-registry-git-ssh-key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=/run/secrets/workspace-registry-git-known-hosts
|
|
volumes:
|
|
- ${THT_WORKSPACE_GIT_SSH_KEY_FILE:?set THT_WORKSPACE_GIT_SSH_KEY_FILE}:/run/secrets/workspace-registry-git-ssh-key:ro
|
|
- ${THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE:?set THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE}:/run/secrets/workspace-registry-git-known-hosts:ro
|