Setup CI

.drone.yml

@@ -0,0 +1,27 @@
+---
+kind: pipeline
+name: deploy to swarm-test.autonomic.zone
+steps:
+  - name: deployment
+    image: decentral1se/stack-ssh-deploy:latest
+    settings:
+      host: swarm-test.autonomic.zone
+      stack: traefik-forward-auth
+      generate_secrets: true
+      purge: true
+      deploy_key:
+        from_secret: drone_ssh_swarm_test
+    environment:
+      DOMAIN: traefik-forward-auth.swarm-test.autonomic.zone
+      STACK_NAME: traefik-forward-auth
+      LETS_ENCRYPT_ENV: production
+      COOKIE_DOMAIN: swarm-test.autonomic.zone
+      AUTH_HOST: auth-test.autonomic.zone
+      OIDC_ISSUER_URL: https://id-test.autonomic.zone/auth/realms/test
+      OIDC_CLIENT_ID: traefik-forward-auth
+      FORWARD_INI_VERSION: v1
+      SERCRET_NONCE_VERSION: v1
+      OIDC_CLIENT_SECRET_VERSION: v1
+trigger:
+  branch:
+    - master

compose.yml

@@ -24,7 +24,7 @@ services:
         - "traefik.http.services.tfa.loadBalancer.server.port=4181"
         - "traefik.http.routers.tfa.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.tfa.entrypoints=web-secure"
-        - "traefik.http.routers.tfa.tls.certresolver=production"
+        - "traefik.http.routers.tfa.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.tfa.middlewares=keycloak@file"
 
 networks: