version: "3.7" services: letsencrypt-do: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: ${LOCAL_DOCKER_REGISTRY}letsencrypt-do environment: - CERTBOT_EMAIL=${CERTBOT_EMAIL} - SERVER_NAME=${GIT_DOMAIN} - PROXY_PASS=http://gitea:3000/ - BLOG_PROXY_PASS=http://ghost:2368 - CHAT_PROXY_PASS=http://chat:3000 - REMOTE_PROXY_PASS=http://guacamole:8080/guacamole/ - DRONE_PROXY_PASS=http://drone-server:8080 - REGISTRY_PROXY_PASS=http://registry:5000 - LOCATION=/git/ - BLOG_LOCATION=/blog/ - CHAT_LOCATION=/chat/ - REMOTE_LOCATION=/remote/ volumes: - letsencrypt-git:/etc/letsencrypt networks: - appnet ports: - 80:80 - 443:443 - 5000:5000 - 5001:5001 gitea: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: gitea/gitea:latest environment: - USER_UID=1000 - USER_GID=1000 - ROOT_URL=https://${GIT_DOMAIN}/git - SSH_DOMAIN=${GIT_DOMAIN} volumes: - gitea-app:/data ports: - 3000 - 22:22 networks: - appnet ghost: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: ghost volumes: - ghost-content:/var/lib/ghost/content - ./ghost/config.production.json:/var/lib/ghost/config.production.json environment: - url=https://${GIT_DOMAIN}/blog networks: - appnet chat: deploy: placement: constraints: [node.labels.com.sigyl.git-stack-chat == yes] replicas: 1 # will scale after mongo initated restart_policy: condition: any image: rocketchat/rocket.chat:latest networks: - appnet environment: - MONGO_OPLOG_URL=mongodb://chat-mongo:27017/local - ROOT_URL=https://${GIT_DOMAIN}/chat/ - ROOT_URL_PATH_PREFIX=chat - PORT=3000 - MONGO_URL=mongodb://chat-mongo:27017/rocketchat volumes: - chat-uploads:/app/uploads chat-mongo: deploy: placement: constraints: [node.labels.com.sigyl.git-stack-chat == yes] replicas: 1 restart_policy: condition: any image: mongo:4.0 networks: - appnet environment: - MONGO_DATA_DIR=/data/db - MONGO_LOG_DIR=/dev/null volumes: - mongo-chat:/data/db command: mongod --smallfiles --replSet rs0 --oplogSize 128 drone-server: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: drone/drone:latest volumes: - drone:/var/lib/drone - drone-data:/data depends_on: - gitea environment: - DRONE_LOGS_DEBUG=true - DRONE_LOGS_PRETTY=true - DRONE_GITEA_SERVER=https://${GIT_DOMAIN}/git - DRONE_GITEA_CLIENT_ID=${DRONE_GITEA_CLIENT_ID} - DRONE_GITEA_CLIENT_SECRET=${DRONE_GITEA_CLIENT_SECRET} - DRONE_SERVER_HOST=${GIT_DOMAIN}:5000 # tunnel hostname - DRONE_ADMIN=giles - DRONE_SERVER_PROTO=https # tunnel adds https on top - DRONE_SERVER_PORT=:8080 - DRONE_RPC_SECRET=${DRONE_RPC_SECRET} - DRONE_USER_CREATE=username:giles,admin:true - DRONE_AGENTS_ENABLED=true - DRONE_CONVERT_PLUGIN_ENDPOINT=http://drone-starlark:3000 - DRONE_CONVERT_PLUGIN_SECRET=${DRONE_CONVERT_SECRET} #- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888 #- DRONE_ENV_PLUGIN_TOKEN=anything networks: - appnet drone-docker-runner: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: drone/drone-runner-docker:1 depends_on: - drone-server volumes: - /var/run/docker.sock:/var/run/docker.sock environment: - DRONE_RPC_PROTO=https - DRONE_RPC_HOST=${GIT_DOMAIN}:5000 - DRONE_RPC_SECRET=${DRONE_RPC_SECRET} - DRONE_RUNNER_CAPACITY=8 - DRONE_RUNNER_NAME="docker-runner" #- DRONE_ENV_PLUGIN_ENDPOINT=http://git.local-domain:8888 #- DRONE_ENV_PLUGIN_TOKEN=anything drone-starlark: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: ${LOCAL_DOCKER_REGISTRY}drone-starlark environment: - DRONE_DEBUG=true - DRONE_SECRET=${DRONE_CONVERT_SECRET} - DRONE_STARLARK_REPO_PATHS=this:/repos networks: - appnet registry: deploy: placement: constraints: [node.labels.com.sigyl.git-stack == yes] replicas: 1 restart_policy: condition: any image: registry:2 volumes: - registry-data:/var/lib/registry environment: - REGISTRY_HTTP_ADDR=0.0.0.0:5000 networks: - appnet guacamole-postgresql: deploy: placement: constraints: [node.labels.com.sigyl.git-stack-chat == yes] replicas: 1 restart_policy: condition: any image: ${LOCAL_DOCKER_REGISTRY}guacamole-postgresql:latest environment: POSTGRES_PASSWORD: ${GUACAMOLE_POSTGRES_PASSWORD} POSTGRES_DB: ${GUACAMOLE_POSTGRES_DB} volumes: - guacamole-postgresql-data:/var/lib/postgresql/data networks: - appnet guacd: deploy: placement: constraints: [node.labels.com.sigyl.git-stack-chat == yes] replicas: 1 restart_policy: condition: any image: guacamole/guacd:latest networks: - appnet guacamole: deploy: placement: constraints: [node.labels.com.sigyl.git-stack-chat == yes] replicas: 1 restart_policy: condition: any image: guacamole/guacamole:latest environment: - POSTGRES_HOSTNAME=guacamole-postgresql - POSTGRES_PORT=5432 - POSTGRES_USER=${GUACAMOLE_POSTGRES_USER} - POSTGRES_PASSWORD=${GUACAMOLE_POSTGRES_PASSWORD} - POSTGRES_DATABASE=${GUACAMOLE_POSTGRES_DB} - GUACD_HOSTNAME=guacd networks: - appnet volumes: gitea-db: gitea-app: letsencrypt-git: ghost-content: mongo-chat: chat-uploads: drone: drone-data: registry-data: guacamole-postgresql-data: networks: appnet: driver: overlay