version: "3.7" services: drone-server: image: drone/drone:latest container_name: drone-server restart: unless-stopped dns: - 192.168.178.100 # specify your internal dns server for proper dns lookups; especially if you are using https and hostnames volumes: - ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/drone/data:/var/lib/drone #- /var/run/docker.sock:/var/run/docker.sock:ro environment: - DRONE_DEBUG=true #- DRONE_ADMIN=droneadm #- DRONE_USER_CREATE=username:droneadm,admin:true - DRONE_SERVER_PORT=:80 - DRONE_DATABASE_DRIVER=sqlite3 - DRONE_GIT_ALWAYS_AUTH=false - DRONE_GITEA_SERVER=https://git.domain.tld # change this to your gitea instance - DRONE_RPC_SECRET=8aff725d2e16ef31fbc42 - DRONE_SERVER_HOST=drone.domain.tld # change this to your drone instance - DRONE_HOST=https://drone.domain.tld # change this to your drone instance; adjust http/https - DRONE_SERVER_PROTO=https # adjust http/https - DRONE_TLS_AUTOCERT=false - DRONE_AGENTS_ENABLED=true - DRONE_GITEA_CLIENT_ID=XXX-XXX # change this to your client ID from Gitea; see https://docs.drone.io/server/provider/gitea/ - DRONE_GITEA_CLIENT_SECRET=XXX-XXX # change this to your client secret from Gitea; see https://docs.drone.io/server/provider/gitea/ networks: - proxy labels: - traefik.enable=true - traefik.http.routers.drone-server.rule=Host(`drone.domain.tld`) - traefik.http.services.drone-server.loadbalancer.server.port=80 - traefik.docker.network=proxy # Part for local lan services only; disable to expose externally - traefik.http.routers.drone-server.middlewares=local-ipwhitelist@file drone-agent: image: drone/agent:1.2.1 command: agent restart: unless-stopped container_name: drone-agent volumes: - /var/run/docker.sock:/var/run/docker.sock # optional; necessary if you run docker runners and need access to docker socket environment: - DRONE_RPC_SERVER=http://drone-server:80 - DRONE_RPC_SECRET=8aff725d2e16ef31fbc42 - DRONE_RUNNER_CAPACITY=2 networks: - proxy networks: proxy: external: true