ansible/roles/docker/tasks/services/drone.yml

---
- name: set up drone with docker runner
  community.docker.docker_compose:
    project_name: drone
    pull: true
    definition:
      version: '3.6'
      services:
        drone:
          container_name: drone
          image: drone/drone:1
          restart: unless-stopped
          networks:
            - external_services
            - drone
          volumes:
            - '{{ services.drone.volume_folder }}:/data'
            - /var/run/docker.sock:/var/run/docker.sock
          environment:
            DRONE_GITEA_SERVER: https://{{ services.gitea.domain }}
            DRONE_GITEA_CLIENT_ID: '{{ drone_secrets.oauth_client_id }}'
            DRONE_GITEA_CLIENT_SECRET: '{{ drone_secrets.oauth_client_secret }}'
            DRONE_GIT_ALWAYS_AUTH: 'true'
            DRONE_SERVER_HOST: '{{ services.drone.domain }}'
            DRONE_SERVER_PROTO: https
            DRONE_RPC_SECRET: '{{ drone_secrets.rpc_shared_secret }}'
            PLUGIN_CUSTOM_DNS: 91.239.100.100
            VIRTUAL_HOST: '{{ services.drone.domain }}'
            LETSENCRYPT_HOST: '{{ services.drone.domain }}'
            LETSENCRYPT_EMAIL: '{{ letsencrypt_email }}'

        drone-runner-docker:
          container_name: drone-runner-docker
          image: drone/drone-runner-docker:{{ services.drone.version }}
          restart: unless-stopped
          networks:
            - drone
          volumes:
            - /var/run/docker.sock:/var/run/docker.sock
          environment:
            DRONE_RPC_HOST: '{{ services.drone.domain }}'
            DRONE_RPC_PROTO: https
            DRONE_RPC_SECRET: '{{ drone_secrets.rpc_shared_secret }}'
            DRONE_RUNNER_CAPACITY: 2
            DRONE_RUNNER_NAME: data.coop_drone_runner

      networks:
        drone:
        external_services:
          external:
            name: external_services