Make it possible to disable image push

.dockerignore

@@ -0,0 +1,5 @@
+.idea/
+data/
+secrets/
+compose.override.yaml
+.git/

.gitignore

@@ -0,0 +1,4 @@
+.idea/
+data/
+secrets/
+compose.override.yaml

Dockerfile

@@ -13,6 +13,11 @@ COPY ["./rootfs", "/"]
 
 FROM knatnetwork/github-runner-kms:latest
 
+RUN set -eux \
+    && apk add --no-cache bash
+
 COPY --from=rootfs ["/", "/"]
 
+ENV NORMALIZE_SECRET_NAMES=0
+
 ENTRYPOINT ["/init"]

bin/build

@@ -1,15 +1,22 @@
 #!/usr/bin/env bash
 
 main() {
-    set -eux
+    set -eu
 
     docker build -t "${XCR_REGISTRY:?}/n0rthernl1ghts/gha-runner-kms:latest" .
 
     local git_hash
     git_hash="$(git rev-parse --verify HEAD)"
     docker tag "${XCR_REGISTRY:?}/n0rthernl1ghts/gha-runner-kms:latest" "${XCR_REGISTRY:?}/n0rthernl1ghts/gha-runner-kms:git-${git_hash}"
+
+    local enable_push="${1:-1}"
+    if [[ "${enable_push}" -ne 1 ]]; then
+        echo "Push is disabled."
+        return
+    fi
+
     docker push "${XCR_REGISTRY}/n0rthernl1ghts/gha-runner-kms:latest"
     docker push "${XCR_REGISTRY}/n0rthernl1ghts/gha-runner-kms:git-${git_hash}"
 }
 
-main
+main "${@}"

compose.yaml

@@ -0,0 +1,19 @@
+secrets:
+  PAT_N0rthernL1ghts:
+    file: ./secrets/PAT_N0rthernL1ghts.txt
+
+networks:
+  default:
+
+services:
+  kms:
+    image: xcr.se/n0rthernl1ghts/gha-runner-kms:latest
+    hostname: vm-vulcan-ghr-prod-01-kms.router0.net
+    deploy:
+      replicas: 1
+      restart_policy:
+        condition: any
+    secrets:
+      - PAT_N0rthernL1ghts
+    networks:
+      default: