Gitea＆Drone＆リバースプロキシ - 闘うITエンジニアの覚え書き

GITEA_HOST=XXX.XXX.XXX     <- ドメイン名
#GITEA_HTTP_PORT=13000
GITEA_SSH_PORT=10022
GITEA_USER_GID=1000
GITEA_USER_UID=1000

GITEA_DB_HOST=gitea-db:5432
GITEA_DB_NAME=gitea
GITEA_DB_PASSWD=gitea
GITEA_DB_PASSWORD=gitea
GITEA_DB_USER=gitea

DRONE_HOST=XXX.XXX.XXX    <- ドメイン名
#DRONE_PORT=8000
DRONE_GITEA_CLIENT_ID=
DRONE_GITEA_CLIENT_SECRET=
DRONE_RPC_SECRET=secret
DRONE_RUNNER_CAPACITY=2

REGISTRY_PORT=15000

version: "3"

services:
  gitea-proxy:
    image: nginx:latest
    hostname: gitea-proxy
    container_name: gitea-proxy
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
      - /etc/letsencrypt:/etc/letsencrypt
      - ./www:/var/www
    links:
      - gitea-app
    depends_on:
      - gitea-app
    #networks:
    #  - my-drone-network

  gitea-app:
    image: gitea/gitea:latest
    hostname: gitea-app
    container_name: gitea-app
    environment:
      USER_UID: "${GITEA_USER_UID}"
      USER_GID: "${GITEA_USER_GID}"
      #DOMAIN: "${GITEA_HOST}"
      #HTTP_PORT: "${GITEA_HTTP_PORT}"
      #ROOT_URL: "http://${GITEA_HOST}:${GITEA_HTTP_PORT}"
      ROOT_URL: "https://${GITEA_HOST}/gitea"
      DB_TYPE: "postgres"
      DB_HOST: "${GITEA_DB_HOST}"
      DB_NAME: "${GITEA_DB_NAME}"
      DB_USER: "${GITEA_DB_USER}"
      DB_PASSWD: "${GITEA_DB_PASSWD}"
      SSH_DOMAIN: "${GITEA_HOST}"
      SSH_PORT: "${GITEA_SSH_PORT}"
      SKIP_TLS_VERIFY: "true"
      TZ: "Japan"
    #ports:
    #  - "${GITEA_HTTP_PORT}:${GITEA_HTTP_PORT}"
    volumes:
      - ./volumes/gitea-app:/data
      #- /etc/timezone:/etc/timezone:ro
      #- :/etc/localtime:ro
    links:
      - gitea-db
    #networks:
    #  - my-drone-network

  gitea-db:
    image: postgres:latest
    hostname: gitea-db
    container_name: gitea-db
    volumes:
      - ./volumes/gitea-db:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: "${GITEA_DB_NAME}"
      POSTGRES_USER: "${GITEA_DB_USER}"
      POSTGRES_PASSWORD: "${GITEA_DB_PASSWD}"
    #networks:
    #  - my-drone-network

  drone-app:
    image: drone/drone:latest
    hostname: drone-app
    container_name: drone-app
    environment:
    links:
      - gitea-app
    depends_on:
      - gitea-app
    environment:
      DOCKER_API_VERSION: "1.39"
      DRONE_AGENT_ENABLED: "true"
      #DRONE_GITEA_SERVER: "http://${GITEA_HOST}:${GITEA_HTTP_PORT}"
      DRONE_GITEA_SERVER: "https://${GITEA_HOST}/gitea"
      DRONE_GITEA_CLIENT_ID: "${DRONE_GITEA_CLIENT_ID}"
      DRONE_GITEA_CLIENT_SECRET: "${DRONE_GITEA_CLIENT_SECRET}"
      DRONE_RPC_SECRET: "${DRONE_RPC_SECRET}"
      #DRONE_SERVER_HOST: "${DRONE_HOST}:${DRONE_PORT}"
      DRONE_SERVER_HOST: "${DRONE_HOST}"
      DRONE_SERVER_PROTO: "https"
      DRONE_USER_CREATE: "username:droneadmin,admin:true"
      DRONE_GITEA_SKIP_VERIFY: "true"
      DRONE_GITEA_ALWAYS_AUTH: "false"
      DRONE_TLS_AUTOCERT: "false"
    #ports:
    #  - "${DRONE_PORT}:80"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./volumes/drone-app:/var/lib/drone
    #networks:
    #  - my-drone-network

  drone-runner:
    image: drone/drone-runner-docker:latest
    hostname: drone-runner
    container_name: drone-runner
    links:
      - drone-app
      - gitea-app
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./.env:/etc/drone.env:ro
    environment:
      DOCKER_API_VERSION: "1.39"
      DRONE_RPC_PROTO: "https"
      #DRONE_RPC_HOST: "${DRONE_HOST}:${DRONE_PORT}"
      DRONE_RPC_HOST: "${DRONE_HOST}"
      DRONE_RPC_SECRET: "${DRONE_RPC_SECRET}"
      DRONE_RUNNER_CAPACITY: "${DRONE_RUNNER_CAPACITY}"
      DRONE_RUNNER_NAME: "drone-runner"
      DRONE_RUNNER_ENV_FILE: "/etc/drone.env"
      DRONE_TRACE: "true"
      DRONE_RPC_DUMP_HTTP: "true"
      DRONE_RPC_DUMP_HTTP_BODY: "true"
      #DRONE_RUNNER_NETWORKS: my-drone-network
    #networks:
    #  - my-drone-network

  local-registry:
    image: registry:2
    hostname: local-registry
    container_name: local-registry
    ports:
      - "${REGISTRY_PORT}:5000"
    volumes:
      - ./volumes/local-registry:/var/lib/registry
    #networks:
    #  - my-drone-network

#networks:
#  my-drone-network:
#    driver: bridge

# http
server{
    listen 80;
    listen [::]:80;
    server_name ドメイン名;
    return 301 https://\$host\$request_uri;
}

# https
server{
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name  ドメイン名;
    ssl_certificate     /etc/letsencrypt/live/ドメイン名/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/ドメイン名/privkey.pem;

    location /gitea/ {
        proxy_pass http://gitea-app:3000/;
    }

    location / {
        proxy_pass http://drone-app/;
    }
}