From 3cde50404c47af704686c4b8829507ebb1188ed0 Mon Sep 17 00:00:00 2001
From: Luke Murphy <lukewm@riseup.net>
Date: Thu, 2 Apr 2020 01:39:11 +0200
Subject: [PATCH] Limit orgs who can run drone (and sort vars)

---
 ansible/pre-deploy.yml | 3 ++-
 ansible/vars/all.yml   | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ansible/pre-deploy.yml b/ansible/pre-deploy.yml
index e51e2a3..42495d1 100644
--- a/ansible/pre-deploy.yml
+++ b/ansible/pre-deploy.yml
@@ -42,5 +42,6 @@
           DRONE_GIT_ALWAYS_AUTH: "true"
           DRONE_RPC_SECRET: "{{ rpc_secret }}"
           DRONE_SERVER_HOST: "{{ drone_domain }}"
-          DRONE_SERVER_PROTO: "https"
           DRONE_SERVER_PORT: ":{{ drone_port }}"
+          DRONE_SERVER_PROTO: "https"
+          DRONE_USER_FILTER: "{{ drone_user_filter }}"
diff --git a/ansible/vars/all.yml b/ansible/vars/all.yml
index b5dd5f8..a4a0178 100644
--- a/ansible/vars/all.yml
+++ b/ansible/vars/all.yml
@@ -2,4 +2,5 @@
 autonomic_admin_mail: "helo@autonomic.zone"
 drone_domain: "drone.autonomic.zone"
 drone_port: "8042"
+drone_user_filter: "autonomic-cooperative"
 gitea_domain: "https://git.autonomic.zone"