# https://www.yisu.com/zixun/15849.html
# https://docs.drone.io/server/provider/gitlab/
version: '3'
services:
  drone-server:
    restart: always  ## 容器自动重启
    image: drone/drone:2
    container_name: drone-server-cloudnative
    networks:  ## 使用自定义网络，也可以不写
      - drone-net-cloudnative
    ports:
      - "9901:80"  ## 映射到宿主机的端口
    volumes:
      - ./data:/var/lib/drone
    environment:
      - DRONE_SERVER_HOST=drone.windymuse.com.cn  ## 端口需要和映射至宿主机的一致
      - DRONE_SERVER_PROTO=https
      - DRONE_RPC_SECRET=7e52616bc93b86d114f95de534011d82 ## openssl rand -hex 16 自动生成
      # true 表示允许注册，false 表示关闭注册功能，此时只有 DRONE_ADMIN 中指定的账户才能登录
      - DRONE_OPEN=true
      # Drone 外网地址
      - DRONE_HOST=https://drone.windymuse.com.cn
      # 使用 Gitea
      - DRONE_GITEA=true
      # Gitea 的 Client ID
      - DRONE_GITEA_CLIENT_ID=d1da07a5-1033-467b-b579-a6a411b20f0f
      # Gitea 的 Secret
      - DRONE_GITEA_CLIENT_SECRET=gto_ujniibp4ju546mnptk76homqkj5kcbtsuqgpu2dqdztdzkffcwkq
      # Gitea 的 URL
      - DRONE_GITEA_SERVER=https://gitea.windymuse.com.cn
      # 设置admin权限，以使用Trusted功能
      # https://blog.csdn.net/qq_35425070/article/details/106822146
      # https://blog.csdn.net/qq_35425070/article/details/106822191
      # ,token:Ac7W1qgPyqxe9u00lI9E2IBrXpT8T6CA
      - DRONE_USER_CREATE=username:maidong,admin:true
  drone-runner-docker:
    restart: always  ## 容器自动重启
    image: drone/drone-runner-docker:1
    container_name: drone-runner-docker-cloudnative
    networks:
      - drone-net-cloudnative
    ports:
      - "9902:3000"  ## 映射到宿主机的端口，用于提供web页面，显示任务执行情况，可不映射
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - DRONE_RPC_PROTO=http
      - DRONE_RPC_HOST=drone-server-cloudnative
      - DRONE_RPC_SECRET=7e52616bc93b86d114f95de534011d82 ## 与server服务中保持一致
      - DRONE_RUNNER_NAME=docker-worker
      - DRONE_RUNNER_CAPACITY=2
      - TZ=Asia/Shanghai 
      - DRONE_DEBUG=true
      #- DRONE_LOGS_DEBUG=true
      #- DRONE_LOGS_TRACE=true
      - DRONE_UI_USERNAME=admin   ## runner的web页面用户信息
      - DRONE_UI_PASSWORD=password
    depends_on:
      - drone-server

networks:   ## 可以不自定义
  drone-net-cloudnative:
    driver: bridge