update registrar.sh

woodpecker/docker-compose.yml

@@ -38,7 +38,10 @@ services:
       - woodpecker
     environment:
       # 内网 agent 仍然走容器网络直连 server:9000
-      - "WOODPECKER_SERVER=woodpecker-server:9000"
+      # - "WOODPECKER_SERVER=woodpecker-server:9000"
+      - WOODPECKER_SERVER=ci-agent.jmsu.top:4443
+      - WOODPECKER_GRPC_SECURE=true
+      - WOODPECKER_GRPC_VERIFY=true
       - "WOODPECKER_AGENT_SECRET=${WOODPECKER_AGENT_SECRET}"
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock"
@@ -55,13 +58,16 @@ services:
       - SERVICE_NAME=woodpecker-grpc
       - SERVICE_ADDR=${LOCAL_TS_IP}
       - SERVICE_PORT=8419          # 对外注册用 8419
-      - ROUTE_HOST=${WOODPECKER_GRPC_HOST}
       - SERVICE_PROTOCOL=tcp
       - CHECK_TYPE=tcp
       - CHECK_INTERVAL=${CHECK_INTERVAL}
       - CHECK_TIMEOUT=${CHECK_TIMEOUT}
       - DEREG_AFTER=${DEREG_AFTER}
-      - TRAEFIK_TCP_ENTRYPOINT=${TRAEFIK_TCP_ENTRYPOINT}
+      - TRAEFIK_TCP_ENTRYPOINT=${TRAEFIK_TCP_ENTRYPOINT} # 你在 traefik.yml 里把 :4443 命名为 tcp，.env 已经配置为 tcp
+      - SERVICE_PROTOCOL=tcp
+      - ROUTE_HOST=${WOODPECKER_GRPC_HOST}     # ci-agent.jmsu.top
+      - TLS_MODE=terminating                   # ★ A 方案：Traefik 终止 TLS
+      - TRAEFIK_CERT_RESOLVER=alidns           # ★ 用你已有的 alidns ACME
     volumes:
       - ./registrar.sh:/registrar.sh:ro
     entrypoint: ["/bin/sh","/registrar.sh"]