---
version: "3.8"

# Note(decentral1se): outstanding tickets for swarm integration
# https://discourse.drone.io/t/can-drone-drone-image-support-file-for-env-var-secrets/7522

services:
  drone:
    image: "drone/drone:1.8.0"
    volumes:
      - "data:/data"
    environment:
      - DRONE_GITEA_CLIENT_ID: "${GITEA_CLIENT_ID}"
      - DRONE_GITEA_CLIENT_SECRET: "${GITEA_CLIENT_SECRET}"
      - DRONE_GITEA_SERVER: "https://${GITEA_DOMAIN}"
      - DRONE_GIT_ALWAYS_AUTH: "true"
      - DRONE_JSONNET_ENABLED: "true"
      - DRONE_RPC_SECRET: "${RPC_SECRET}"
      - DRONE_SERVER_HOST: "${DOMAIN}"
      - DRONE_SERVER_PORT: ":8042"
      - DRONE_SERVER_PROTO: "https"
    networks:
      - proxy
    deploy:
      update_config:
        failure_action: rollback
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.drone.rule=Host(`${DOMAIN}`)"
        - "traefik.http.routers.drone.entrypoints=web-secure"
        - "traefik.http.services.drone.loadbalancer.server.port=8042"
        - "traefik.http.routers.drone.tls.certresolver=${LETS_ENCRYPT_ENV}"

volumes:
  data: