2022-10-09 16:59:31 +00:00
|
|
|
version: "3.8"
|
|
|
|
|
|
|
|
|
|
networks:
|
|
|
|
|
drone-network:
|
|
|
|
|
external: true
|
|
|
|
|
traefik-network:
|
|
|
|
|
external: true
|
|
|
|
|
|
|
|
|
|
services:
|
|
|
|
|
drone-service:
|
|
|
|
|
image: docker.io/drone/drone:2
|
|
|
|
|
hostname: drone-service-host
|
|
|
|
|
tty: true
|
|
|
|
|
environment:
|
2022-10-30 15:40:09 +00:00
|
|
|
- DS_NODE_NAME={{.Node.Hostname}}
|
|
|
|
|
- DS_SERVICE_NAME={{.Service.Name}}
|
|
|
|
|
- DS_TASK_NAME={{.Task.Name}}
|
|
|
|
|
## unable to use the internal DNS name as this URL is shown to
|
2022-10-09 16:59:31 +00:00
|
|
|
## the user for oauth login.
|
|
|
|
|
##- DRONE_GITEA_SERVER=http://gitea-service-host:3000
|
|
|
|
|
- DRONE_GITEA_SERVER=https://code.miflux.com
|
|
|
|
|
- DRONE_GITEA_CLIENT_ID=55c9b1a3-0902-4877-bc7a-225a87906b52
|
|
|
|
|
- DRONE_GITEA_CLIENT_SECRET=gto_5vemyidhgakygsowyjkhm2kqvjksdpzaiakfscj7e6dfmnips4xa
|
|
|
|
|
- DRONE_RPC_SECRET=bd7c7058fd60caa00b86f7ea944c913d
|
|
|
|
|
- DRONE_SERVER_HOST=ci.miflux.com
|
|
|
|
|
- DRONE_SERVER_PROTO=https
|
|
|
|
|
- DRONE_USER_CREATE=username:hyung-hwan,admin:true
|
|
|
|
|
networks:
|
|
|
|
|
- drone-network
|
|
|
|
|
- traefik-network
|
|
|
|
|
volumes:
|
|
|
|
|
- type: bind
|
|
|
|
|
source: /home/gfs-data/drone
|
|
|
|
|
target: /data
|
|
|
|
|
- type: bind
|
|
|
|
|
source: /etc/timezone
|
|
|
|
|
target: /etc/timezone
|
|
|
|
|
read_only: true
|
|
|
|
|
- type: bind
|
|
|
|
|
source: /etc/localtime
|
|
|
|
|
target: /etc/localtime
|
|
|
|
|
read_only: true
|
|
|
|
|
# ports:
|
|
|
|
|
# - target: 80
|
|
|
|
|
# published: 80
|
|
|
|
|
# protocol: tcp
|
|
|
|
|
# - target: 443
|
|
|
|
|
# published: 443
|
|
|
|
|
# protocol: tcp
|
|
|
|
|
deploy:
|
|
|
|
|
mode: replicated
|
|
|
|
|
replicas: 1
|
|
|
|
|
placement:
|
|
|
|
|
max_replicas_per_node: 1
|
|
|
|
|
##constraints:
|
|
|
|
|
## - node.labels.location == home
|
|
|
|
|
## - node.hostname == rose
|
|
|
|
|
resources:
|
|
|
|
|
limits:
|
|
|
|
|
memory: 1GB
|
|
|
|
|
restart_policy:
|
|
|
|
|
condition: on-failure
|
|
|
|
|
labels:
|
|
|
|
|
- traefik.enable=true
|
|
|
|
|
##- traefik.docker.network=traefik-network
|
|
|
|
|
- traefik.http.routers.drone-https.entrypoints=websec
|
|
|
|
|
- traefik.http.routers.drone-https.rule=Host(`ci.miflux.com`)
|
|
|
|
|
- traefik.http.routers.drone-https.tls=true
|
|
|
|
|
# - traefik.http.routers.drone-http.entrypoints=web
|
|
|
|
|
# - traefik.http.routers.drone-http.rule=Host(`ci.miflux.com`)
|
|
|
|
|
# - traefik.http.routers.drone-http.tls=false
|
|
|
|
|
- traefik.http.services.drone-service.loadbalancer.server.port=80
|
|
|
|
|
- traefik.http.services.drone-service.loadbalancer.sticky.cookie=true
|
|
|
|
|
- traefik.http.services.drone-service.loadbalancer.sticky.cookie.name=drone-sticker
|
