mkdir -p /opt/oxidized/{ssh,config}

ssh-keygen -t rsa -b 2048 -m PEM -C "bot@git.mydomain.net" -f /opt/oxidized/ssh/bot
chown -R 30000:30000 /opt/oxidized/

ssh-keyscan -p 2222 git.mydomain.net > /opt/oxidized/ssh/known_hosts

version: '3.6'

services:
  oxidized:
    restart: always
    image: oxidized/oxidized:latest
    ports:
      - 8888:8888/tcp
    environment:
      CONFIG_RELOAD_INTERVAL: 600
    volumes:
       - ./oxidized/config:/home/oxidized/.config/oxidized/
       - ./oxidized/ssh:/home/oxidized/.ssh/

---
username: __READ_ONLY_USERNAME__
password: __PASSWORD__
...
rest: 0.0.0.0:8888
output:
  default: git
  git:
    user: bot
    email: noreply@mydomain.net
    repo: "/home/oxidized/.config/oxidized/oxidized.git"
hooks:
  push_to_remote:
    type: githubrepo
    events: [node_success, post_store]
    remote_repo:
      group1: ssh://git@git.mydomain.net/configs/group1-router-configs.git
      group1: ssh://git@git.mydomain.net/configs/group2-router-configs.git
    publickey: /home/oxidized/.ssh/bot.pub
    privatekey: /home/oxidized/.ssh/bot
...

rtr1:192.168.0.101:iosxr:group1
rtr2:192.168.0.102:iosxr:group1
rtr3:192.168.0.201:iosxr:group2
rtr4:192.168.0.202:iosxr:group2

# cat 
version: '3.6'

services:
  app:
    image: gitlab/gitlab-ce:16.6.7-ce.0
    restart: always
    environment:
      GITLAB_ALLOW_SHA1_RSA: true