drone CI

apps/drone/live-runner.hcl

@@ -0,0 +1,69 @@
+job "drone-runner" {
+  datacenters = [
+    "nummer5",
+  ]
+  type = "service"
+
+  group "apps" {
+    count = 1
+
+    network {
+      mode = "host"
+      port "http" {
+        to = 3000
+      }
+
+    }
+    
+    service {
+        name = "drone-runner"
+        port = "http"
+    }
+
+    volume "drone-runner" {
+      type      = "csi"
+      source    = "drone-runner"
+      read_only = false
+      access_mode = "single-node-writer"
+      attachment_mode = "file-system"
+    }
+
+    restart {
+      attempts = 5
+      delay    = "30s"
+    }
+
+    task "drone-runner" {
+      driver = "podman"
+      volume_mount {
+        volume      = "drone-runner"
+        destination = "/data"
+        read_only   = false
+      }
+
+      config {
+        image = "docker.io/drone/drone-runner-docker:1"
+        ports = ["http"]
+        volumes = [
+          "/var/run/podman/podman.sock:/var/run/docker.sock",
+          "/etc/containers:/etc/containers"
+        ]
+ 
+      }
+
+      env {
+        TZ                        = "Europe/Berlin"
+        DRONE_RUNNER_NAME         = "drone-runner01"
+        DRONE_RPC_SECRET          = "7eb685ed81d0c34bafc5efa7783c20b2"
+        DRONE_RPC_HOST            = "drone.service.nr5"
+        DRONE_RPC_PROTO           = "http"
+      }
+
+      resources {
+        cpu    = 200
+        memory = 128 
+      }
+
+    }
+  }
+}

apps/drone/live.hcl

@@ -0,0 +1,71 @@
+job "drone" {
+  datacenters = [
+    "nummer5",
+  ]
+  type = "service"
+
+  group "apps" {
+    count = 1
+
+    network {
+      mode = "host"
+      port "http" {
+        to = 80
+      }
+
+    }
+    
+    service {
+        name = "drone"
+        port = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.drone.rule=Host(`drone.service.nr5`)",
+        ]
+    }
+
+    volume "drone-data" {
+      type      = "csi"
+      source    = "drone-data"
+      read_only = false
+      access_mode = "single-node-writer"
+      attachment_mode = "file-system"
+    }
+
+    restart {
+      attempts = 5
+      delay    = "30s"
+    }
+
+    task "drone" {
+      driver = "podman"
+      volume_mount {
+        volume      = "drone-data"
+        destination = "/data"
+        read_only   = false
+      }
+
+      config {
+        image = "docker.io/drone/drone:2"
+        ports = ["http"]
+      }
+
+      env {
+        TZ                        = "Europe/Berlin"
+        DRONE_GITEA_SERVER        = "http://gitea.service.nr5"
+        DRONE_GITEA_CLIENT_ID     = "6c48da2c-2748-438e-b776-51f41d3fe607"
+        DRONE_GITEA_CLIENT_SECRET = "gto_ewohqwympejkb52veheox6doc4juodojyyvph4yf4gekhgtx7zna"
+        DRONE_RPC_SECRET          = "7eb685ed81d0c34bafc5efa7783c20b2"
+        DRONE_SERVER_HOST         = "drone.service.nr5"
+        DRONE_SERVER_PROTO        = "http"
+      }
+
+      resources {
+        cpu    = 200
+        memory = 128 
+      }
+
+    }
+  }
+}

apps/drone/volume-runner.hcl

@@ -0,0 +1,20 @@
+type = "csi"
+id = "drone-runner"
+name = "drone-runner"
+plugin_id = "nfs"
+
+capability {
+    access_mode = "single-node-writer"
+    attachment_mode = "file-system"
+}
+
+context {
+  server = "ebin01.wks"
+  share = "/data/raid1-ssd/app-data/drone-runner"
+  mountPermissions = "0"  
+}
+
+mount_options {
+  fs_type = "nfs"
+  mount_flags = [ "timeo=30", "vers=3", "_netdev" , "nolock" ]
+}

apps/drone/volume.hcl

@@ -0,0 +1,21 @@
+type = "csi"
+id = "drone-data"
+name = "drone-data"
+plugin_id = "nfs"
+external_id = "drone-data"
+
+capability {
+    access_mode = "single-node-writer"
+    attachment_mode = "file-system"
+}
+
+context {
+  server = "ebin02.wks"
+  share = "/data/raid1-ssd/app-data/drone-data"
+  mountPermissions = "0"  
+}
+
+mount_options {
+  fs_type = "nfs"
+  mount_flags = [ "timeo=30", "vers=3", "_netdev" , "nolock" ]
+}