renovate-bot/compose.yml

---
version: "3.8"
services:
  app:
    image: "renovate/renovate:32.66.5-slim"
    environment:
      LOG_LEVEL: info
      GITHUB_COM_TOKEN_FILE: /run/secrets/github_token
    configs:
      - source: config_js
        target: /usr/src/app/config.js
      - source: entrypoint
        target: /docker-entrypoint.sh
        mode: 0555
    entrypoint: /docker-entrypoint.sh
    command: renovate
    secrets:
      - api_token
      - github_token
    healthcheck:
      disable: true
    deploy:
      mode: replicated
      replicas: 0
      labels:
        - "swarm.cronjob.enable=true"
        # Note(decentral1se): every minute, testing
        # - "swarm.cronjob.schedule=* * * * *"
        - "swarm.cronjob.schedule=0 9 * * 1-5" # office hours
        - coop-cloud.${STACK_NAME}.app.version=24.98.9-slim-d3db1c25
      restart_policy:
        condition: none
configs:
  config_js:
    name: renovate_config_js_v3
    file: config.js.tmpl
    template_driver: golang
  entrypoint:
    name: renovate_entrypoint_v1
    file: entrypoint.sh
secrets:
  api_token:
    name: renovate_api_token_v1
    external: true
  github_token:
    name: renovate_github_token_v1
    external: true