roles/docker/defaults/main.yml

@@ -163,6 +163,13 @@ services:
     volume_folder: "{{ volume_root_folder }}/drone"
     version: 1
 
+  woodpecker:
+    file: woodpecker.yml
+    domain: "ci.{{ base_domain }}"
+    volume_folder: "{{ volume_root_folder }}/woodpecker"
+    server_version: v0.15
+    agent_version: v0.15
+
   mailu:
     file: mailu.yml
     version: 1.9

roles/docker/tasks/services/woodpecker.yml

@@ -0,0 +1,46 @@
+# vim: ft=yaml.ansible
+---
+- name: set up woodpecker with docker runner
+  docker_compose:
+    project_name: woodpecker
+    pull: yes
+    definition:
+      version: "3.6"
+      services:
+        woodpecker-server:
+          image: "woodpeckerci/woodpecker-server:{{ services.woodpecker.server_version }}"
+          restart: unless-stopped
+          networks:
+            - external_services
+            - woodpecker
+          volumes:
+            - "{{ services.woodpecker.volume_folder }}:/data"
+            - "/var/run/docker.sock:/var/run/docker.sock"
+          environment:
+            WOODPECKER_GITEA: "true"
+            WOODPECKER_GITEA_URL: "https://{{ services.gitea.domain }}"
+            WOODPECKER_GITEA_CLIENT: "{{ woodpecker_secrets.oauth_client_id }}"
+            WOODPECKER_GITEA_SECRET: "{{ woodpecker_secrets.oauth_client_secret }}"
+            WOODPECKER_HOST: "https://{{ services.woodpecker.domain }}"
+            WOODPECKER_AGENT_SECRET: "{{ woodpecker_secrets.agent_secret }}"
+
+            VIRTUAL_HOST: "{{ services.woodpecker.domain }}"
+            LETSENCRYPT_HOST: "{{ services.woodpecker.domain }}"
+            LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
+
+        woodpecker-agent:
+          image: "woodpeckerci/woodpecker-agent:{{ services.woodpecker.agent_version }}"
+          restart: unless-stopped
+          networks:
+            - woodpecker
+          volumes:
+            - "/var/run/docker.sock:/var/run/docker.sock"
+          environment:
+            WOODPECKER_SERVER: "woodpecker-server:9000"
+            WOODPECKER_AGENT_SECRET: "{{ woodpecker_secrets.agent_secret }}"
+
+      networks:
+        woodpecker:
+        external_services:
+          external:
+            name: external_services