drone/compose.yml

---
version: "3.8"

services:
  drone:
    image: "drone/drone:1.9.1"
    command:
      - "--env-file /data/drone.conf"
    volumes:
      - "data:/data"
    configs:
      - source: drone_conf
        target: /data/drone.conf
    environment:
      - DRONE_GITEA_CLIENT_ID: "${GITEA_CLIENT_ID}"
      - DRONE_GITEA_SERVER: "https://${GITEA_DOMAIN}"
      - DRONE_GIT_ALWAYS_AUTH: "true"
      - DRONE_JSONNET_ENABLED: "true"
      - DRONE_SERVER_HOST: "${DOMAIN}"
      - DRONE_SERVER_PORT: ":${PORT:8042}"
      - DRONE_SERVER_PROTO: "https"
    networks:
      - proxy
    deploy:
      update_config:
        failure_action: rollback
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.drone.rule=Host(`${DOMAIN}`)"
        - "traefik.http.routers.drone.entrypoints=web-secure"
        - "traefik.http.services.drone.loadbalancer.server.port=${PORT:8042}"
        - "traefik.http.routers.drone.tls.certresolver=${LETS_ENCRYPT_ENV}"

configs:
  drone_conf:
    name: ${STACK_NAME}_drone_conf_${DRONE_CONF_VERSION}
    file: drone.conf.tmpl
    template_driver: golang

volumes:
  data: