|
|
|
version: '3'
|
|
|
|
services:
|
|
|
|
reverse-proxy:
|
|
|
|
image: traefik:v2.2
|
|
|
|
command:
|
|
|
|
# Try to enable this if something isn't working. Chances are, Traefik will tell you why
|
|
|
|
# Be careful on production as it exposes the traffic you might not want to expose
|
|
|
|
# --log.level=DEBUG
|
|
|
|
# --api.dashboard=true
|
|
|
|
# --api.insecure=true
|
|
|
|
|
|
|
|
--entrypoints.http.address=:80
|
|
|
|
--entrypoints.https.address=:443
|
|
|
|
--providers.docker=true
|
|
|
|
--api=false
|
|
|
|
--certificatesresolvers.letsencrypt.acme.httpchallenge=true
|
|
|
|
--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=http
|
|
|
|
--certificatesresolvers.letsencrypt.acme.email=${ACME_EMAIL}
|
|
|
|
--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
|
|
|
|
restart: always
|
|
|
|
ports:
|
|
|
|
- 80:80
|
|
|
|
- 443:443
|
|
|
|
volumes:
|
|
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
|
|
- ${DATA_DIR}/letsencrypt:/letsencrypt
|
|
|
|
drone-server:
|
|
|
|
image: drone/drone:1
|
|
|
|
container_name: drone-server
|
|
|
|
restart: always
|
|
|
|
ports:
|
|
|
|
- 8000:80
|
|
|
|
volumes:
|
|
|
|
- ${DATA_DIR}/drone-server:/data
|
|
|
|
environment:
|
|
|
|
DRONE_GITEA_SERVER: ${DRONE_GITEA_SERVER}
|
|
|
|
DRONE_GITEA_CLIENT_ID: ${DRONE_GITEA_CLIENT_ID}
|
|
|
|
DRONE_GITEA_CLIENT_SECRET: ${DRONE_GITEA_CLIENT_SECRET}
|
|
|
|
DRONE_RPC_SECRET: ${DRONE_RPC_SECRET}
|
|
|
|
DRONE_COOKIE_SECRET: ${DRONE_COOKIE_SECRET}
|
|
|
|
DRONE_COOKIE_TIMEOUT: ${DRONE_COOKIE_TIMEOUT}
|
|
|
|
DRONE_SERVER_HOST: ${DRONE_SERVER_HOST}
|
|
|
|
DRONE_SERVER_PROTO: ${DRONE_SERVER_PROTO}
|
|
|
|
DRONE_USER_FILTER: ${DRONE_USER}
|
|
|
|
DRONE_USER_CREATE: username:${DRONE_USER},admin:true
|
|
|
|
labels:
|
|
|
|
- "traefik.http.routers.https.rule=Host(`${DRONE_SERVER_HOST}`)"
|
|
|
|
- "traefik.http.routers.http.rule=Host(`${DRONE_SERVER_HOST}`)"
|
|
|
|
- "traefik.http.routers.https.entrypoints=https"
|
|
|
|
- "traefik.http.routers.http.entrypoints=http"
|
|
|
|
- "traefik.http.routers.https.tls=true"
|
|
|
|
- "traefik.http.routers.https.tls.certresolver=letsencrypt"
|
|
|
|
drone-runner:
|
|
|
|
image: drone/drone-runner-docker:1
|
|
|
|
ports:
|
|
|
|
- 3000:3000
|
|
|
|
restart: always
|
|
|
|
container_name: drone-runner
|
|
|
|
volumes:
|
|
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
|
|
environment:
|
|
|
|
DRONE_RPC_PROTO: ${DRONE_SERVER_PROTO}
|
|
|
|
DRONE_RPC_HOST: drone-server
|
|
|
|
DRONE_RPC_SECRET: ${DRONE_RPC_SECRET}
|
|
|
|
DRONE_RUNNER_CAPACITY: ${DRONE_RUNNER_CAPACITY}
|
|
|
|
DRONE_RUNNER_NAME: ${DRONE_RUNNER_NAME}
|
|
|
|
DRONE_UI_USERNAME: ${DRONE_UI_USERNAME}
|
|
|
|
DRONE_UI_PASSWORD: ${DRONE_UI_PASSWORD}
|