/ infra / sonarqube-coverage.cspec
sonarqube-coverage.cspec
 1  name: SonarQube Self-Hosted Code Coverage Integration
 2  version: 1.0.0
 3  implemented: 2026-01-10
 4  status: operational
 5  
 6  architecture:
 7    deployment:
 8      location: ci.ac-dc.network (10.106.0.3)
 9      public_access: https://source.ac-dc.network/sonarqube
10      
11    components:
12      sonarqube:
13        version: 26.1.0.118079
14        container: sonarqube
15        port: 0.0.0.0:9000
16        
17      postgres:
18        version: 15
19        container: sonarqube-postgres
20        
21      caddy_proxy:
22        location: source.ac-dc.network
23        route: /sonarqube/* → http://10.106.0.3:9000
24  
25  installation:
26    system_prep:
27      - sysctl vm.max_map_count=524288
28      - mkdir /opt/sonarqube/{data,extensions,logs,postgres}
29      
30    docker_compose:
31      file: /opt/sonarqube/docker-compose.yml
32      
33    configuration:
34      admin_password: Alpha-Delta-SonarQube-2026!
35      ci_token: sqa_6c7e9310c03b5442aff74960f0b6599c7325f3ed
36      token_storage: /opt/ci/sonarqube-token.txt
37      
38    projects_created:
39      - alpha-delta-network_acdc-core
40      - alpha-delta-network_alphavm
41      - alpha-delta-network_alphaos
42      - alpha-delta-network_deltavm
43      - alpha-delta-network_deltaos
44      - alpha-delta-network_adnet
45      - alpha-delta-network_sdk
46      - alpha-delta-network_adl
47      - alpha-delta-network_ac-dc
48  
49  ci_integration:
50    trigger: Tag push (refs/tags/v*)
51    execution: Parallel with radicle-push (non-blocking)
52    
53    coverage_generation:
54      tool: cargo-tarpaulin
55      outputs: XML + LCOV
56      
57    sonarqube_upload:
58      scanner: sonarsource/sonar-scanner-cli
59      host: https://source.ac-dc.network/sonarqube
60      
61    artifact_persistence:
62      retention: 30 days
63      location: Forgejo Actions artifacts
64  
65  secrets_required:
66    name: SONAR_TOKEN
67    value: sqa_6c7e9310c03b5442aff74960f0b6599c7325f3ed
68    scope: Per-repository (all 9 repos)
69    location: Forgejo Settings → Secrets → Actions
70  
71  access:
72    web_ui: https://source.ac-dc.network/sonarqube
73    admin_user: admin
74    admin_pass: Alpha-Delta-SonarQube-2026!
75  
76  maintenance:
77    restart: cd /opt/sonarqube && sudo docker compose restart
78    logs: sudo docker logs sonarqube
79    backup: /opt/sonarqube/{data,postgres}