From bcb59237fc48bd3b2dd8516efb3b4f82f3301782 Mon Sep 17 00:00:00 2001
From: Luke Murphy <lukewm@riseup.net>
Date: Tue, 27 Oct 2020 09:37:36 +0100
Subject: [PATCH] Setup CI

---
 .drone.yml  | 27 +++++++++++++++++++++++++++
 compose.yml |  2 +-
 2 files changed, 28 insertions(+), 1 deletion(-)
 create mode 100644 .drone.yml

diff --git a/.drone.yml b/.drone.yml
new file mode 100644
index 0000000..b87dd75
--- /dev/null
+++ b/.drone.yml
@@ -0,0 +1,27 @@
+---
+kind: pipeline
+name: deploy to swarm-test.autonomic.zone
+steps:
+  - name: deployment
+    image: decentral1se/stack-ssh-deploy:latest
+    settings:
+      host: swarm-test.autonomic.zone
+      stack: traefik-forward-auth
+      generate_secrets: true
+      purge: true
+      deploy_key:
+        from_secret: drone_ssh_swarm_test
+    environment:
+      DOMAIN: traefik-forward-auth.swarm-test.autonomic.zone
+      STACK_NAME: traefik-forward-auth
+      LETS_ENCRYPT_ENV: production
+      COOKIE_DOMAIN: swarm-test.autonomic.zone
+      AUTH_HOST: auth-test.autonomic.zone
+      OIDC_ISSUER_URL: https://id-test.autonomic.zone/auth/realms/test
+      OIDC_CLIENT_ID: traefik-forward-auth
+      FORWARD_INI_VERSION: v1
+      SERCRET_NONCE_VERSION: v1
+      OIDC_CLIENT_SECRET_VERSION: v1
+trigger:
+  branch:
+    - master
diff --git a/compose.yml b/compose.yml
index 5e5587a..bfc4fee 100644
--- a/compose.yml
+++ b/compose.yml
@@ -24,7 +24,7 @@ services:
         - "traefik.http.services.tfa.loadBalancer.server.port=4181"
         - "traefik.http.routers.tfa.rule=Host(`${DOMAIN}`)"
         - "traefik.http.routers.tfa.entrypoints=web-secure"
-        - "traefik.http.routers.tfa.tls.certresolver=production"
+        - "traefik.http.routers.tfa.tls.certresolver=${LETS_ENCRYPT_ENV}"
         - "traefik.http.routers.tfa.middlewares=keycloak@file"
 
 networks: