diff --git a/.drone.yml b/.drone.yml
deleted file mode 100644
index 92e16e3..0000000
--- a/.drone.yml
+++ /dev/null
@@ -1,16 +0,0 @@
----
-kind: pipeline
-name: default
-steps:
-  - name: Deploy Drone docker runner with Dokku
-    image: appleboy/drone-git-push:0.2.0-linux-amd64
-    settings:
-      remote: ssh://dokku@dokku.autonomic.zone:222/drone-docker-runner
-      ssh_key:
-        from_secret: drone_deploy_key
-trigger:
-  branch:
-    - master
-  event:
-    exclude:
-      - pull_request
diff --git a/.envrc.sample b/.envrc.sample
deleted file mode 100644
index cfe67cc..0000000
--- a/.envrc.sample
+++ /dev/null
@@ -1,2 +0,0 @@
-# The path to our pass credentials store
-export PASSWORD_STORE_DIR=$(pwd)/../infrastructure/credentials/password-store
diff --git a/CHECKS b/CHECKS
deleted file mode 100644
index 7eb6c10..0000000
--- a/CHECKS
+++ /dev/null
@@ -1,5 +0,0 @@
-WAIT=3
-TIMEOUT=3
-ATTEMPTS=5
-
-/healthz
diff --git a/Dockerfile b/Dockerfile
deleted file mode 100644
index c5a9e5a..0000000
--- a/Dockerfile
+++ /dev/null
@@ -1,5 +0,0 @@
-FROM drone/drone-runner-docker:1.3
-
-EXPOSE 3000
-
-COPY . ${WORKDIR}
diff --git a/README.md b/README.md
index 3eaee76..7213c33 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,5 @@
-# drone-docker-runner
+# drone-docker-runner.autonomic.zone
 
-[![Build Status](https://drone.autonomic.zone/api/badges/autonomic-cooperative/drone-docker-runner/status.svg)](https://drone.autonomic.zone/autonomic-cooperative/drone-docker-runner)
-
-> https://drone.io/
+[![Build Status](https://drone.autonomic.zone/api/badges/autonomic-cooperative/drone-docker-runner.autonomic.zone/status.svg)](https://drone.autonomic.zone/autonomic-cooperative/drone-docker-runner.autonomic.zone)
 
 > https://drone-docker-runner.autonomic.zone
diff --git a/compose.yml b/compose.yml
new file mode 100644
index 0000000..fa5a352
--- /dev/null
+++ b/compose.yml
@@ -0,0 +1,49 @@
+---
+version: "3.8"
+
+services:
+  drone-docker-runner:
+    image: "drone/drone-runner-docker:1.3"
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock"
+    configs:
+      - source: drone_runner_env
+        target: .env
+    secrets:
+      - rpc_secret
+    environment:
+      - DRONE_RPC_HOST=drone.autonomic.zone
+      - DRONE_RPC_PROTO=https
+      - DRONE_RUNNER_CAPACITY=4
+      - DRONE_RUNNER_NAME=drone-docker-runner
+      - DRONE_RUNNER_VOLUMES=/var/run/docker.sock:/var/run/docker.sock
+    networks:
+      - proxy
+    deploy:
+      update_config:
+        failure_action: rollback
+        order: start-first
+      labels:
+        - "traefik.enable=true"
+        - "traefik.http.routers.drone-docker-runner.rule=Host(`drone-docker-runner.autonomic.zone`)"
+        - "traefik.http.routers.drone-docker-runner.entrypoints=web-secure"
+        - "traefik.http.services.drone-docker-runner.loadbalancer.server.port=3000"
+        - "traefik.http.routers.drone-docker-runner.tls.certresolver=production"
+
+networks:
+  proxy:
+    external: true
+
+configs:
+  drone_runner_env:
+    name: drone_docker_runner_env_v1
+    file: env.tmpl
+    template_driver: golang
+
+secrets:
+  rpc_secret:
+    name: drone_docker_runner_rpc_secret_v1
+    external: true
+
+volumes:
+  data:
diff --git a/deploy.d/config.yml b/deploy.d/config.yml
deleted file mode 100644
index f31326c..0000000
--- a/deploy.d/config.yml
+++ /dev/null
@@ -1,16 +0,0 @@
----
-vars:
-  port: "3000"
-  domain: "drone-docker-runner.autonomic.zone"
-
-volumes:
-  - /var/run/docker.sock:/var/run/docker.sock
-
-env:
-  DOKKU_LETSENCRYPT_EMAIL: "helo@autonomic.zone"
-  DRONE_RPC_HOST: "drone.autonomic.zone"
-  DRONE_RPC_PROTO: "https"
-  DRONE_RPC_SECRET: "{{ vault.rpc_secret }}"
-  DRONE_RUNNER_CAPACITY: "4"
-  DRONE_RUNNER_NAME: "drone-docker-runner"
-  DRONE_RUNNER_VOLUMES: "/var/run/docker.sock:/var/run/docker.sock"
diff --git a/deploy.d/vault/rpc_secret.yml b/deploy.d/vault/rpc_secret.yml
deleted file mode 100644
index 18faef3..0000000
--- a/deploy.d/vault/rpc_secret.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-rpc_secret: !vault |-
-  $ANSIBLE_VAULT;1.1;AES256
-  30383961383637336366373331383662613062393937313864363331366264396266643538633536
-  6666633634636335386532656238333631653334663130610a623936626139353965616666393834
-  31663930373264346665616337326533316337653330323635316463376663393334323733613963
-  6466373137326435630a313831363030636439383861623666383366316466396463616565633432
-  66633835636161656439353035373630616537386262613136373662623339623831623766613436
-  6330626239366536626438396536373836353035346262623230
diff --git a/env.tmpl b/env.tmpl
new file mode 100644
index 0000000..f234e1a
--- /dev/null
+++ b/env.tmpl
@@ -0,0 +1 @@
+DRONE_RPC_SECRET={{ secret "rpc_secret" }}