ansible/roles/docker/tasks/services/drone.yml

---
- name: Drone container
  docker_container:
    name: drone
    image: drone/drone:1.6.5
    restart_policy: unless-stopped
    networks:
      - name: external_services
    volumes:
      - "{{ drone.volume_folder }}:/data"
      - "/var/run/docker.sock:/var/run/docker.sock"
    env:
      DRONE_GITEA_SERVER: "https://{{ gitea.domain }}"
      DRONE_GITEA_CLIENT_ID: "{{ drone_secrets.oauth_client_id }}"
      DRONE_GITEA_CLIENT_SECRET: "{{ drone_secrets.oauth_client_secret }}"
      DRONE_GIT_ALWAYS_AUTH: "true"
      DRONE_SERVER_HOST: "{{ drone.domain }}"
      DRONE_SERVER_PROTO: "https"
      DRONE_RPC_SECRET: "{{ drone_secrets.rpc_shared_secret }}"
      PLUGIN_CUSTOM_DNS: "91.239.100.100"
      VIRTUAL_HOST: "{{ drone.domain }}"
      LETSENCRYPT_HOST: "{{ drone.domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"