docker-compose.inc.yml

  # ------------------------------------------------------------------------------
  cicd:
    extends:
      file: ${DCAPE_ROOT}/docker-compose.dcape.yml
      service: template-traefik
    image: ${CICD_IMAGE}:${CICD_VER}
    labels:
      - traefik.http.routers.cicd.rule=Host(`${CICD_HOST}`)
      - traefik.http.services.app-cicd.loadbalancer.server.port=8000
    depends_on:
      - cicd-agent
    environment:
      - GIN_MODE=release
      - WOODPECKER_OPEN=false
      - WOODPECKER_HOST=${DCAPE_SCHEME}://${CICD_HOST}
      - WOODPECKER_AGENT_SECRET=${CICD_AGENT_SECRET}
      - WOODPECKER_ADMIN=${CICD_ADMIN}
      - WOODPECKER_GITHUB=${CICD_GITHUB_USED}
      - WOODPECKER_GITHUB_CLIENT=${CICD_GITHUB_CLIENT_ID}
      - WOODPECKER_GITHUB_SECRET=${CICD_GITHUB_CLIENT_KEY}
      - WOODPECKER_GITEA=${CICD_GITEA_USED}
      - WOODPECKER_GITEA_URL=${CICD_GITEA_URL}
      - WOODPECKER_GITEA_CLIENT=${CICD_GITEA_CLIENT_ID}
      - WOODPECKER_GITEA_SECRET=${CICD_GITEA_CLIENT_KEY}
      - WOODPECKER_DATABASE_DRIVER=postgres
      - WOODPECKER_DATABASE_DATASOURCE=postgres://${CICD_DB_TAG}:${CICD_DB_PASS}@db/${CICD_DB_TAG}?sslmode=disable
      - WOODPECKER_ENVIRONMENT=DCAPE_TAG:${DCAPE_TAG},DCAPE_NET:${DCAPE_NET},DCAPE_ROOT:${DCAPE_ROOT},DCAPE_DOMAIN:${DCAPE_DOMAIN},DCAPE_COMPOSE:${DCAPE_TAG}-compose,DCAPE_SCM:${AUTH_URL},DCAPE_ROOT_BASE:${DCAPE_VAR}/cicd,DCAPE_ROOT_LOCAL:/data
#      - WOODPECKER_ESCALATE=docker,plugins/docker,plugins/gcr,plugins/ecr,woodpeckerci/plugin-docker,woodpeckerci/plugin-docker-buildx
      - WOODPECKER_LOG_LEVEL=debug
      - WOODPECKER_NETWORK=${DCAPE_NET}
      - WOODPECKER_AUTHENTICATE_PUBLIC_REPOS=true
    volumes:
      - /etc/ssl/certs:/etc/ssl/certs:ro

  cicd-agent:
    extends:
      file: ${DCAPE_ROOT}/docker-compose.dcape.yml
      service: template
    image: woodpeckerci/woodpecker-agent:${CICD_VER}
    command: agent
    volumes:
#      - /etc/ssl/certs:/etc/ssl/certs:ro
      - /etc/docker/certs.d:/etc/docker/certs.d:ro
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - WOODPECKER_SERVER=cicd:9000 # GRPC server
      - WOODPECKER_AGENT_SECRET=${CICD_AGENT_SECRET}
      - WOODPECKER_DATABASE_DRIVER=postgres
      - WOODPECKER_DATABASE_DATASOURCE=postgres://${CICD_DB_TAG}:${CICD_DB_PASS}@db/${CICD_DB_TAG}?sslmode=disable
      - WOODPECKER_LOG_LEVEL=debug
      - WOODPECKER_BACKEND_DOCKER_VOLUMES=/etc/ssl/certs:/etc/ssl/certs:ro,/etc/docker/certs.d:/etc/docker/certs.d:ro,${DCAPE_VAR}/cicd:/data