drone/.drone/drone-home.yml

---
kind: pipeline
type: docker
name: build

platform:
  os: linux
  arch: amd64

steps:
- name: print env
  image: appleboy/drone-ssh:1.6.2
  settings:
    envs:
    - drone_tag
    - drone_commit
    - drone_build_number
    - drone_repo_name
    - drone_repo_namespace
    - drone_domain
    - drone_gitea_client_id
    - drone_gitea_server
    - drone_server_host
    - local_docker_registry
    - drone_runner_environ
    host:
      from_secret: ssh-host
    password:
      from_secret: ssh-password
    port:
      from_secret: ssh-port
    script:
    - rm -f env-drone
    - "echo \"export DRONE_DOMAIN='$${DRONE_DOMAIN}'\" >> env-drone # \"drone-domain\""
    - "echo \"export DRONE_GITEA_CLIENT_ID='$${DRONE_GITEA_CLIENT_ID}'\" >> env-drone # \"drone-gitea-client-id\""
    - "echo \"export DRONE_GITEA_SERVER='$${DRONE_GITEA_SERVER}'\" >> env-drone # \"drone-gitea-server\""
    - "echo \"export DRONE_SERVER_HOST='$${DRONE_SERVER_HOST}'\" >> env-drone # \"drone-server-host\""
    - "echo \"export LOCAL_DOCKER_REGISTRY='$${LOCAL_DOCKER_REGISTRY}'\" >> env-drone # \"local-docker-registry\""
    - "echo \"export DRONE_RUNNER_ENVIRON='$${DRONE_RUNNER_ENVIRON}'\" >> env-drone # \"drone-runner-environ\""
    username:
      from_secret: ssh-user
  environment:
    DRONE_DOMAIN:
      from_secret: drone-domain
    DRONE_GITEA_CLIENT_ID:
      from_secret: drone-gitea-client-id
    DRONE_GITEA_SERVER:
      from_secret: drone-gitea-server
    DRONE_RUNNER_ENVIRON:
      from_secret: drone-runner-environ
    DRONE_SERVER_HOST:
      from_secret: drone-server-host
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry

- name: scp
  image: appleboy/drone-scp:1.6.2
  settings:
    command_timeout: 2m
    host:
      from_secret: ssh-host
    password:
      from_secret: ssh-password
    port:
      from_secret: ssh-port
    source:
    - .
    target: /stack/drone
    username:
      from_secret: ssh-user

- name: wait
  image: alpine
  commands:
  - sleep 15

- name: "dockerbuild:"
  image: docker:dind
  commands:
  - set -e
  - docker login $${LOCAL_DOCKER_REGISTRY} --username client --password "$${REGISTRY_PASSWORD}"
  - sh build.sh
  - sh push.sh
  - docker logout $${LOCAL_DOCKER_REGISTRY}
  environment:
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry
    REGISTRY_PASSWORD:
      from_secret: registry-password
  volumes:
  - name: dockersock
    path: /var/run

- name: deploy stack
  image: appleboy/drone-ssh:1.6.2
  settings:
    envs:
    - drone_tag
    - drone_commit
    - drone_build_number
    - drone_repo_name
    - drone_repo_namespace
    - drone_domain
    - drone_gitea_client_id
    - drone_gitea_server
    - drone_server_host
    - local_docker_registry
    - drone_runner_environ
    - drone_convert_secret
    - drone_gitea_client_secret
    - drone_rpc_secret
    - registry_password
    host:
      from_secret: ssh-host
    password:
      from_secret: ssh-password
    port:
      from_secret: ssh-port
    script:
    - export DRONE_CONVERT_SECRET=$${DRONE_CONVERT_SECRET}
    - export DRONE_GITEA_CLIENT_SECRET=$${DRONE_GITEA_CLIENT_SECRET}
    - export DRONE_RPC_SECRET=$${DRONE_RPC_SECRET}
    - export REGISTRY_PASSWORD=$${REGISTRY_PASSWORD}
    - export DRONE_DOMAIN=$${DRONE_DOMAIN}
    - export DRONE_GITEA_CLIENT_ID=$${DRONE_GITEA_CLIENT_ID}
    - export DRONE_GITEA_SERVER=$${DRONE_GITEA_SERVER}
    - export DRONE_SERVER_HOST=$${DRONE_SERVER_HOST}
    - export LOCAL_DOCKER_REGISTRY=$${LOCAL_DOCKER_REGISTRY}
    - export DRONE_RUNNER_ENVIRON=$${DRONE_RUNNER_ENVIRON}
    - set -e
    - cd /stack/drone
    - docker login $${LOCAL_DOCKER_REGISTRY} --username client --password "$${REGISTRY_PASSWORD}"
    - sh pull.sh
    - sh deploy.sh
    username:
      from_secret: ssh-user
  environment:
    DRONE_CONVERT_SECRET:
      from_secret: drone-convert-secret
    DRONE_DOMAIN:
      from_secret: drone-domain
    DRONE_GITEA_CLIENT_ID:
      from_secret: drone-gitea-client-id
    DRONE_GITEA_CLIENT_SECRET:
      from_secret: drone-gitea-client-secret
    DRONE_GITEA_SERVER:
      from_secret: drone-gitea-server
    DRONE_RPC_SECRET:
      from_secret: drone-rpc-secret
    DRONE_RUNNER_ENVIRON:
      from_secret: drone-runner-environ
    DRONE_SERVER_HOST:
      from_secret: drone-server-host
    LOCAL_DOCKER_REGISTRY:
      from_secret: local-docker-registry
    REGISTRY_PASSWORD:
      from_secret: registry-password

services:
- name: docker
  image: docker:dind
  privileged: true
  volumes:
  - name: dockersock
    path: /var/run
  - name: ca
    path: /etc/docker/certs.d

volumes:
- name: dockersock
  temp: {}
- name: ca
  host:
    path: /etc/docker/certs.d

...