.

.drone.do.yml

@@ -1,252 +0,0 @@
----
-# this builds and deploys the system on static ip servers
-kind: pipeline
-type: docker
-name: default
-
-clone:
-  # skip_verify: true
-
-steps:
-- name: printenv
-  when:
-    branch:
-    - do
-  image: appleboy/drone-ssh
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_HOST:
-      from_secret: ssh-host
-    SSH_USER:
-      from_secret: ssh-user
-    SSH_PORT:
-      from_secret: ssh-port
-    CERTBOT_EMAIL:
-      from_secret: certbot-email
-    GIT_DOMAIN:
-      from_secret: git-domain
-  settings:
-    envs:
-      - local_docker_registry
-      - ssh_host
-      - ssh_user
-      - ssh_port
-      - certbot_email
-      - git_domain
-    host:
-      from_secret: ssh-host
-    port:
-      from_secret: ssh-port
-    username: 
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    script:
-      - echo SSH_HOST=$SSH_HOST > env
-      - echo SSH_USER=$SSH_USER >> env
-      - echo SSH_PORT=$SSH_PORT >> env
-      - echo LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY >> env
-      - echo CERTBOT_EMAIL=$CERTBOT_EMAIL >> env
-      - echo GIT_DOMAIN=$GIT_DOMAIN >> env
-- name: clear
-  when:
-    branch:
-    - do
-  image: appleboy/drone-ssh
-  settings:
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    #key:
-    #  from_secret: ssh-key
-    #passphrase:
-    #  from_secret: ssh-passphrase
-    port:
-      from_secret: ssh-port
-    script:
-      - rm -r -f /home/giles/stack-deploy
-- name: wait
-  when:
-    branch:
-    - do
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-
-  commands:
-  - sleep 20
-- name: build-letsencrypt-nginx
-  when:
-    branch:
-    - do
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-  - docker push $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-- name: build-letsencrypt-do
-  when:
-    branch:
-    - do
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh do $${LOCAL_DOCKER_REGISTRY}
-- name: build-postgres
-  when:
-    branch:
-    - do
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd guacamole-postgresql
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-  - docker push $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-- name: build-drone-starlark
-  when:
-    branch:
-    - do
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd drone-starlark
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}drone-starlark
-  - docker push $${LOCAL_DOCKER_REGISTRY}drone-starlark
-
-- name: scp files
-  when:
-    branch:
-    - do
-  image: appleboy/drone-scp
-  settings:
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-user
-    #password:
-    #  from_secret: ssh-password
-    key:
-      from_secret: ssh-key
-    passphrase:
-      from_secret: ssh-passphrase
-    port:
-      from_secret: ssh-port
-    command_timeout: 2m
-    target: /home/giles/stack-deploy
-    source:
-      - .
-- name: deploy
-  when:
-    branch:
-    - do
-  image: appleboy/drone-ssh
-  environment:
-    DRONE_RPC_SECRET:
-      from_secret: drone-rpc-secret
-    DRONE_GITEA_CLIENT_ID:
-      from_secret: drone-gitea-client-id
-    DRONE_GITEA_CLIENT_SECRET:
-      from_secret: drone-gitea-client-secret
-    DRONE_CONVERT_SECRET:
-      from_secret: drone-convert-secret
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_USER:
-      from_secret: ssh-user
-    CERTBOT_EMAIL:
-      from_secret: certbot-email
-    GIT_DOMAIN:
-      from_secret: git-domain
-    GUACAMOLE_POSTGRES_USER:
-      from_secret: guacamole-postgres-user
-    GUACAMOLE_POSTGRES_DB:
-      from_secret: guacamole-postgres-db
-    GUACAMOLE_POSTGRES_PASSWORD:
-      from_secret: guacamole-postgres-password
-  settings:
-    envs:
-      - drone_rpc_secret
-      - drone_gitea_client_id
-      - drone_gitea_client_secret
-      - drone_convert_secret
-      - ssh_user
-      - local_docker_registry
-      - certbot_email
-      - git_domain
-      - guacamole_postgres_user
-      - guacamole_postgres_db
-      - guacamole_postgres_password
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    #key:
-    #  from_secret: ssh-key
-    #passphrase:
-    #  from_secret: ssh-passphrase
-    port:
-      from_secret: ssh-port
-    script:
-      - set -e
-      - export LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY
-      - export DRONE_RPC_SECRET=$DRONE_RPC_SECRET
-      - export DRONE_GITEA_CLIENT_ID=$DRONE_GITEA_CLIENT_ID
-      - export DRONE_GITEA_CLIENT_SECRET=$DRONE_GITEA_CLIENT_SECRET
-      - export SSH_USER=$SSH_USER
-      - export CERTBOT_EMAIL=$CERTBOT_EMAIL
-      - export GIT_DOMAIN=$GIT_DOMAIN
-      - export GUACAMOLE_POSTGRES_USER=$GUACAMOLE_POSTGRES_USER
-      - export GUACAMOLE_POSTGRES_DB=$GUACAMOLE_POSTGRES_DB
-      - export GUACAMOLE_POSTGRES_PASSWORD=$GUACAMOLE_POSTGRES_PASSWORD
-      - export DRONE_CONVERT_SECRET=$DRONE_CONVERT_SECRET
-      - docker network prune -f
-      - cd ~/stack-deploy
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-do
-      - docker pull $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-      - docker pull $${LOCAL_DOCKER_REGISTRY}drone-starlark
-      - docker stack rm gitea
-      - sleep 60
-      - docker stack deploy -c docker-compose-do.yml gitea
-      - docker service scale gitea_chat=1
-      #- sleep 300
-
-services:
-- name: docker
-  image: docker:dind
-  privileged: true
-  volumes:
-  - name: dockersock
-    path: /var/run  
- 
-volumes:
-- name: dockersock
-  temp: {}

.drone.home.yml

@@ -1,301 +0,0 @@
----
-# builds and deploys to stack using ngrok tunnel
-kind: pipeline
-type: docker
-name: default
-when:
-  branch:
-  - home-deploy
-
-
-clone:
-  # skip_verify: true
-
-steps:
-- name: printenv
-  when:
-    branch:
-    - test-deploy-windows
-  image: appleboy/drone-ssh
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_HOST:
-      from_secret: ssh-host
-    SSH_USER:
-      from_secret: ssh-user
-    SSH_PORT:
-      from_secret: ssh-port
-  settings:
-    envs:
-      - local_docker_registry
-      - ssh_host
-      - ssh_user
-      - ssh_port
-    host:
-      from_secret: ssh-host
-    port:
-      from_secret: ssh-port
-    username: 
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    script:
-      - echo SSH_HOST=$SSH_HOST > env
-      - echo SSH_USER=$SSH_USER >> env
-      - echo SSH_PORT=$SSH_PORT >> env
-      - echo LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY >> env
-- name: wait
-  when:
-    branch:
-    - home-deploy
-  image: alpine
-  commands:
-  - sleep 15
-- name: build-postgres
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd guacamole-postgresql
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-  - docker push $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-- name: build-ngrok
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd ngrok-gitea
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}ngrok-gitea
-  - docker push $${LOCAL_DOCKER_REGISTRY}ngrok-gitea
-- name: build-letsencrypt-nginx
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-  - docker push $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-- name: build-nginx-home
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.home.sh $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-blog
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh blog $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-drone
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh drone $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-git
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh git $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-remote
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh remote $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-chat
-  when:
-    branch:
-    - home-deploy-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh chat $${LOCAL_DOCKER_REGISTRY}
-- name: scp files
-  when:
-    branch:
-    - home-deploy
-  image: appleboy/drone-scp
-  settings:
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    port:
-      from_secret: ssh-port
-    command_timeout: 2m
-    target: ~/gitea-drone-stack
-    source:
-      - .
-- name: deploy
-  when:
-    branch:
-    - home-deploy
-  image: appleboy/drone-ssh
-  environment:
-    DRONE_RPC_SECRET:
-      from_secret: drone-rpc-secret
-    DRONE_GITEA_CLIENT_ID:
-      from_secret: drone-gitea-client-id
-    DRONE_GITEA_SERVER:
-      from_secret: drone-gitea-server
-    DRONE_GITEA_CLIENT_SECRET:
-      from_secret: drone-gitea-client-secret
-    DRONE_CONVERT_SECRET:
-      from_secret: drone-convert-secret
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_USER:
-      from_secret: ssh-user
-    CERTBOT_EMAIL:
-      from_secret: certbot-email
-    GIT_DOMAIN:
-      from_secret: git-domain
-    DRONE_DOMAIN:
-      from_secret: drone-domain
-    CHAT_DOMAIN:
-      from_secret: chat-domain
-    REMOTE_DOMAIN:
-      from_secret: remote-domain
-    BLOG_DOMAIN:
-      from_secret: blog-domain
-  settings:
-    envs:
-      - drone_rpc_secret
-      - drone_gitea_client_id
-      - drone_gitea_client_secret
-      - drone_gitea_server
-      - drone_convert_secret
-      - ssh_user
-      - local_docker_registry
-      - certbot_email
-      - git_domain
-      - drone_domain
-      - chat_domain
-      - remote_domain
-      - blog_domain
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-root-user
-    password:
-      from_secret: ssh-root-password
-    port:
-      from_secret: ssh-port
-    script:
-      - set -e
-      - export LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY
-      - export DRONE_RPC_SECRET=$DRONE_RPC_SECRET
-      - export DRONE_GITEA_CLIENT_ID=$DRONE_GITEA_CLIENT_ID
-      - export DRONE_GITEA_CLIENT_SECRET=$DRONE_GITEA_CLIENT_SECRET
-      - export DRONE_GITEA_SERVER=$DRONE_GITEA_SERVER
-      - export DRONE_CONVERT_SECRET=$DRONE_CONVERT_SECRET
-      - export SSH_USER=$SSH_USER
-      - export CERTBOT_EMAIL=$CERTBOT_EMAIL
-      - export GIT_DOMAIN=$GIT_DOMAIN
-      - export DRONE_DOMAIN=$DRONE_DOMAIN
-      - export CHAT_DOMAIN=$CHAT_DOMAIN
-      - export REMOTE_DOMAIN=$REMOTE_DOMAIN
-      - export BLOG_DOMAIN=$BLOG_DOMAIN
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-git
-      - docker pull $${LOCAL_DOCKER_REGISTRY}nginx-home1
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-chat
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-remote
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-blog
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-drone
-
-      - docker network prune -f
-      - cd /home/$SSH_USER/gitea-drone-stack
-      - docker stack rm gitea
-      - sleep 60
-      - docker stack deploy -c docker-compose-home.yml gitea
-      #- sleep 300
-
-services:
-- name: docker
-  image: docker:dind
-  privileged: true
-  volumes:
-  - name: dockersock
-    path: /var/run  
-  - name: ca
-    path: /etc/docker/certs.d
- 
-volumes:
-- name: dockersock
-  temp: {}
-- name: ca
-  host:
-    path: /home/giles/gitea-drone-stack/.ca

.drone.remote.yml

@@ -1,320 +0,0 @@
----
-
-kind: pipeline
-type: docker
-name: default
-when:
-  branch:
-  - remote
-
-clone:
-  # skip_verify: true
-
-steps:
-- name: printenv
-  image: appleboy/drone-ssh
-  environment:
-    CERTBOT_EMAIL:
-       from_secret: certbot-email
-    DRONE_DOMAIN:
-       from_secret: drone-domain
-    DRONE_GITEA_CLIENT_ID:
-       from_secret: drone-gitea-client-id
-    GIT_DOMAIN:
-       from_secret: git-domain
-    REMOTE_DOMAIN:
-       from_secret: remote-domain
-    SSH_HOST:
-       from_secret: ssh-host
-    SSH_PORT:
-       from_secret: ssh-port
-    SSH_USER:
-       from_secret: ssh-user
-    SSH_ROOT_USER:
-       from_secret: ssh-root-user
-    LOCAL_DOCKER_REGISTRY:
-       from_secret: local-docker-registry
-  settings:
-    envs:
-      - certbot_email
-      - drone_domain
-      - drone_gitea_client_id
-      - git_domain
-      - remote_domain
-      - ssh_host
-      - ssh_port
-      - ssh_root_user
-      - ssh_user
-      - local_docker_registry
-    host:
-      from_secret: ssh-host
-    port:
-      from_secret: ssh-port
-    username: 
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    script:
-      - echo certbot-email=$CERTBOT_EMAIL > env-stack
-      - echo drone-domain=$DRONE_DOMAIN >> env-stack
-      - echo drone-gitea-client-id=$DRONE_GITEA_CLIENT_ID >> env-stack
-      - echo git-domain=$GIT_DOMAIN >> env-stack
-      - echo remote-domain=$REMOTE_DOMAIN >> env-stack
-      - echo ssh-host=$SSH_HOST >> env-stack
-      - echo ssh-port=$SSH_PORT >> env-stack
-      - echo ssh-root-user=$SSH_ROOT_USER >> env-stack
-      - echo ssh-user=$SSH_USER >> env-stack
-      - echo local-docker-registry=$LOCAL_DOCKER_REGISTRY >> env-stack
- 
-- name: test-ssh
-  when:
-    branch:
-    - remote
-  image: appleboy/drone-ssh
-  environment:
-    DRONE_RPC_SECRET:
-      from_secret: drone-rpc-secret
-    DRONE_GITEA_CLIENT_ID:
-      from_secret: drone-gitea-client-id
-    DRONE_GITEA_CLIENT_SECRET:
-      from_secret: drone-gitea-client-secret
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_USER:
-      from_secret: ssh-user
-    CERTBOT_EMAIL:
-      from_secret: certbot-email
-    GIT_DOMAIN:
-      from_secret: git-domain
-    DRONE_DOMAIN:
-      from_secret: drone-domain
-    REMOTE_DOMAIN:
-      from_secret: remote-domain
-  settings:
-    envs:
-      - drone_rpc_secret
-      - drone_gitea_client_id
-      - drone_gitea_client_secret
-      - ssh_user
-      - local_docker_registry
-      - certbot_email
-      - git_domain
-      - drone_domain
-      - remote_domain
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-root-user
-    password:
-      from_secret: ssh-root-password
-    port:
-      from_secret: ssh-port
-    script:
-      - echo 'ssh ok'
-- name: wait
-  when:
-    branch:
-    - remote
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-
-  commands:
-  - sleep 15
-- name: build-drone-starlark
-  when:
-    branch:
-    - remote
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd drone-starlark
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}drone-starlark
-  - docker push $${LOCAL_DOCKER_REGISTRY}drone-starlark
-- name: build-postgres
-  when:
-    branch:
-    - remote-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd guacamole-postgresql
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-  - docker push $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-- name: build-ngrok
-  when:
-    branch:
-    - remote-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd ngrok-gitea
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}ngrok-gitea
-  - docker push $${LOCAL_DOCKER_REGISTRY}ngrok-gitea
-- name: build-letsencrypt-nginx
-  when:
-    branch:
-    - remote-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - docker build . -t $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-  - docker push $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-- name: build-letsencrypt-drone
-  when:
-    branch:
-    - remote-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh drone $${LOCAL_DOCKER_REGISTRY}
-- name: build-letsencrypt-remote
-  when:
-    branch:
-    - remote-skip
-  image: docker:dind
-  volumes:
-  - name: dockersock
-    path: /var/run
-  environment:
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-  commands:
-  - cd letsencrypt-nginx
-  - sh build.sh remote $${LOCAL_DOCKER_REGISTRY}
-- name: scp files
-  when:
-    branch:
-    - remote
-  image: appleboy/drone-scp
-  settings:
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-user
-    password:
-      from_secret: ssh-password
-    port:
-      from_secret: ssh-port
-    command_timeout: 2m
-    target: ~/gitea-drone-stack
-    source:
-      - .
-- name: deploy
-  when:
-    branch:
-    - remote
-  image: appleboy/drone-ssh
-  environment:
-    DRONE_RPC_SECRET:
-      from_secret: drone-rpc-secret
-    DRONE_GITEA_CLIENT_ID:
-      from_secret: drone-gitea-client-id
-    DRONE_GITEA_CLIENT_SECRET:
-      from_secret: drone-gitea-client-secret
-    DRONE_CONVERT_SECRET:
-      from_secret: drone-convert-secret
-    LOCAL_DOCKER_REGISTRY:
-      from_secret: local-docker-registry
-    SSH_USER:
-      from_secret: ssh-user
-    CERTBOT_EMAIL:
-      from_secret: certbot-email
-    GIT_DOMAIN:
-      from_secret: git-domain
-    DRONE_DOMAIN:
-      from_secret: drone-domain
-    REMOTE_DOMAIN:
-      from_secret: remote-domain
-  settings:
-    envs:
-      - drone_rpc_secret
-      - drone_gitea_client_id
-      - drone_gitea_client_secret
-      - drone_convert_secret
-      - ssh_user
-      - local_docker_registry
-      - certbot_email
-      - git_domain
-      - drone_domain
-      - remote_domain
-    host:
-      from_secret: ssh-host
-    username:
-      from_secret: ssh-root-user
-    password:
-      from_secret: ssh-root-password
-    port:
-      from_secret: ssh-port
-    script:
-      - set -e
-      - export LOCAL_DOCKER_REGISTRY=$LOCAL_DOCKER_REGISTRY
-      - export DRONE_RPC_SECRET=$DRONE_RPC_SECRET
-      - export DRONE_GITEA_CLIENT_ID=$DRONE_GITEA_CLIENT_ID
-      - export DRONE_GITEA_CLIENT_SECRET=$DRONE_GITEA_CLIENT_SECRET
-      - export DRONE_CONVERT_SECRET=$DRONE_CONVERT_SECRET
-      - export SSH_USER=$SSH_USER
-      - export CERTBOT_EMAIL=$CERTBOT_EMAIL
-      - export GIT_DOMAIN=$GIT_DOMAIN
-      - export DRONE_DOMAIN=$DRONE_DOMAIN
-      - export REMOTE_DOMAIN=$REMOTE_DOMAIN
-      - docker network prune -f
-      - cd /home/$SSH_USER/gitea-drone-stack
-      - docker pull $${LOCAL_DOCKER_REGISTRY}guacamole-postgresql
-      - docker pull $${LOCAL_DOCKER_REGISTRY}ngrok-gitea
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-nginx
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-drone
-      - docker pull $${LOCAL_DOCKER_REGISTRY}letsencrypt-remote
-      - docker pull $${LOCAL_DOCKER_REGISTRY}drone-starlark
-
-      - docker network prune -f
-      
-      - docker stack rm remote-drone
-      - sleep 60
-      - docker stack deploy -c docker-compose-remote.yml remote-drone
-      #- sleep 300
-
-services:
-- name: docker
-  image: docker:dind
-  privileged: true
-  volumes:
-  - name: dockersock
-    path: /var/run  
-  - name: ca
-    path: /etc/docker/certs.d
- 
-volumes:
-- name: dockersock
-  temp: {}
-- name: ca
-  host:
-    path: /home/giles/gitea-drone-stack/.ca

drone-starlark/repos/deploy.star

@@ -16,10 +16,6 @@ def deploy(
     "environment": environment(secrets),
     "settings": {
       "envs": [x.replace("-", "_") for x in secrets ] +
-      [
-        "drone_repo_link",
-        "drone_commit",
-      ],
       "host": fromSecret("ssh-host"),
       "port": fromSecret("ssh-port"),
       "username": fromSecret("ssh-root-user"),
@@ -29,6 +25,8 @@ def deploy(
       ] +
       map(export, secrets) + 
       [
+        "export DRONE_REPO_LINK=$DRONE_REPO_LINK",
+        "export DRONE_COMMIT=$DRONE_COMMIT",
         "docker network prune -f",
         "cd {folder}".format(folder=folder),
         "docker stack rm {name}".format(name = name),