stack/docker-compose-do.yml

version: "3.7"
services:
  letsencrypt-do:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-do
    environment:
      - CERTBOT_EMAIL=${CERTBOT_EMAIL}
      - SERVER_NAME=${GIT_DOMAIN}
      - PROXY_PASS=http://gitea:3000/
      - BLOG_PROXY_PASS=http://ghost:2368
      - CHAT_PROXY_PASS=http://chat:3000
      - REMOTE_PROXY_PASS=http://guacamole:8080/guacamole/
      - DRONE_PROXY_PASS=http://drone-server:8080
      - REGISTRY_PROXY_PASS=http://registry:5000
      - LOCATION=/git/
      - BLOG_LOCATION=/blog/
      - CHAT_LOCATION=/chat/
      - REMOTE_LOCATION=/remote/
    volumes:
      - letsencrypt-git:/etc/letsencrypt
    networks:
      - appnet
    ports:
      - 80:80
      - 443:443
      - 5000:5000
      - 5001:5001
  gitea:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: gitea/gitea:latest
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - ROOT_URL=https://${GIT_DOMAIN}/git
      - SSH_DOMAIN=${GIT_DOMAIN}
    volumes:
      - gitea-app:/data
    ports:
      - 3000
      - 22:22
    networks:
      - appnet
  ghost:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: ghost
    volumes:
      - ghost-content:/var/lib/ghost/content
      - ./ghost/config.production.json:/var/lib/ghost/config.production.json
    environment:
      - url=https://${GIT_DOMAIN}/blog
    networks:
      - appnet
  chat:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack-chat == yes]
      replicas: 1 # will scale after mongo initated
      restart_policy:
        condition: any
    image: rocketchat/rocket.chat:latest
    networks:
      - appnet
    environment:
      - MONGO_OPLOG_URL=mongodb://chat-mongo:27017/local
      - ROOT_URL=https://${GIT_DOMAIN}/chat/
      - ROOT_URL_PATH_PREFIX=chat
      - PORT=3000
      - MONGO_URL=mongodb://chat-mongo:27017/rocketchat
    volumes:
      - chat-uploads:/app/uploads
  chat-mongo:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack-chat == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: mongo:4.0
    networks:
      - appnet
    environment:
      - MONGO_DATA_DIR=/data/db
      - MONGO_LOG_DIR=/dev/null
    volumes:
      - mongo-chat:/data/db
    command: mongod --smallfiles --replSet rs0 --oplogSize 128
  drone-server:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: drone/drone:latest
    volumes:
      - drone:/var/lib/drone
      - drone-data:/data
    depends_on:
      - gitea
    environment:
      - DRONE_LOGS_DEBUG=true
      - DRONE_LOGS_PRETTY=true
      - DRONE_GITEA_SERVER=https://${GIT_DOMAIN}/git
      - DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID}
      - DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET}
      - DRONE_SERVER_HOST=${GIT_DOMAIN}:5000 # tunnel hostname       
      - DRONE_ADMIN=giles
      - DRONE_SERVER_PROTO=https # tunnel adds https on top
      - DRONE_SERVER_PORT=:8080
      - DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
      - DRONE_USER_CREATE=username:giles,admin:true
      - DRONE_AGENTS_ENABLED=true
      - DRONE_CONVERT_PLUGIN_ENDPOINT=http://drone-starlark:3000
      - DRONE_CONVERT_PLUGIN_SECRET=${DRONE_CONVERT_SECRET}
      #- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
      #- DRONE_ENV_PLUGIN_TOKEN=anything
    networks:
      - appnet
  drone-docker-runner:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: drone/drone-runner-docker:1
    depends_on:
      - drone-server
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - DRONE_RPC_PROTO=https
      - DRONE_RPC_HOST=${GIT_DOMAIN}:5000
      - DRONE_RPC_SECRET=${DRONE_RPC_SECRET}
      - DRONE_RUNNER_CAPACITY=8
      - DRONE_RUNNER_NAME="docker-runner"
      #- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888
      #- DRONE_ENV_PLUGIN_TOKEN=anything
  drone-starlark:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: ${LOCAL_DOCKER_REGISTRY}drone-starlark
    environment:
      - DRONE_DEBUG=true
      - DRONE_SECRET=${DRONE_CONVERT_SECRET}
      - DRONE_STARLARK_REPO_PATHS=this:/repos
    networks:
      - appnet
  registry:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: registry:2
    volumes:
      - registry-data:/var/lib/registry
    environment:
      - REGISTRY_HTTP_ADDR=0.0.0.0:5000
    networks:
      - appnet
  guacamole-postgresql:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack-chat == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: ${LOCAL_DOCKER_REGISTRY}guacamole-postgresql:latest
    environment:
      POSTGRES_PASSWORD: ${GUACAMOLE_POSTGRES_PASSWORD}
      POSTGRES_DB: ${GUACAMOLE_POSTGRES_DB}
    volumes:
      - guacamole-postgresql-data:/var/lib/postgresql/data
    networks:
      - appnet
  guacd:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack-chat == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: guacamole/guacd:latest
    networks:
      - appnet
  guacamole:
    deploy:
      placement:
        constraints: [node.labels.com.sigyl.git-stack-chat == yes]
      replicas: 1
      restart_policy:
        condition: any
    image: guacamole/guacamole:latest
    environment:
      - POSTGRES_HOSTNAME=guacamole-postgresql
      - POSTGRES_PORT=5432
      - POSTGRES_USER=${GUACAMOLE_POSTGRES_USER}
      - POSTGRES_PASSWORD=${GUACAMOLE_POSTGRES_PASSWORD}
      - POSTGRES_DATABASE=${GUACAMOLE_POSTGRES_DB}
      - GUACD_HOSTNAME=guacd
    networks:
      - appnet

volumes:
  gitea-db:
  gitea-app:
  letsencrypt-git:
  ghost-content:
  mongo-chat:
  chat-uploads:
  drone:
  drone-data:
  registry-data:
  guacamole-postgresql-data:
networks:
  appnet:
    driver: overlay