ci: no secrets

.drone/drone.yml

@@ -0,0 +1,20 @@
+kind: pipeline
+name: default
+
+steps:
+- name: docker  
+  image: plugins/docker
+  settings:
+    username: client
+    password: ${REGISTRY_PASSWORD}
+    registry: ${REGISTRY_DOMAIN}:${REGISTRY_PORT}
+    repo: ${REGISTRY_DOMAIN}:${REGISTRY_PORT}/ssh
+  volumes:
+  - name: ca
+    path: /etc/docker/certs.d
+
+volumes:
+- name: ca
+  host:
+    path: /etc/docker/certs.d
+

Dockerfile

@@ -0,0 +1,4 @@
+FROM appleboy/drone-ssh:1.6.2@sha256:b801dc2cd238c192b6e99acfa7bc3f5b9a03f312bd2feb1e10b3a7a28a1b80ea
+COPY run.sh /run.sh
+ENTRYPOINT []
+CMD /run.sh

run.sh

@@ -0,0 +1,6 @@
+export PLUGIN_HOST=$SSH_HOST
+export PLUGIN_USERNAME=$SSH_USER
+export PLUGIN_PORT=$SSH_PORT
+export PLUGIN_KEY=$SSH_KEY
+export PLUGIN_PASSPHRASE=$SSH_PASSPHRASE
+/bin/drone-ssh