---
version: "3.8"

services:
  drone-docker-runner:
    image: "drone/drone-runner-docker:1.5"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
    environment:
      - DRONE_RPC_HOST: "${DOMAIN}"
      - DRONE_RPC_PROTO: "https"
      - DRONE_RPC_SECRET: "${RPC_SECRET}"
      - DRONE_RUNNER_CAPACITY: "4"
      - DRONE_RUNNER_NAME: "drone-docker-runner"
      - DRONE_RUNNER_VOLUMES: "/var/run/docker.sock:/var/run/docker.sock"
    networks:
      - proxy
    deploy:
      update_config:
        failure_action: rollback
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.drone-docker-runner.rule=Host(`${DOMAIN}`)"
        - "traefik.http.routers.drone-docker-runner.entrypoints=web-secure"
        - "traefik.http.services.drone-docker-runner.loadbalancer.server.port=3000"
        - "traefik.http.routers.drone-docker-runner.tls.certresolver=${LETS_ENCRYPT_ENV}"