From 5a92ea666eed6a9e960c4da2c63ae1860b86a70a Mon Sep 17 00:00:00 2001
From: Brooke <brooke@myco.systems>
Date: Fri, 21 Nov 2025 14:07:04 -0500
Subject: [PATCH] pin runner/app version, add version label, expicitly include
 secret, create internal network

---
 compose.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/compose.yml b/compose.yml
index fb9f1d4..acf0e5f 100644
--- a/compose.yml
+++ b/compose.yml
@@ -2,10 +2,8 @@
 version: "3.8"
 
 services:
-  runner:
-    image: registry.gitlab.com/gitlab-org/gitlab-runner:alpine
-    depends_on:
-      - dind
+  app:
+    image: registry.gitlab.com/gitlab-org/gitlab-runner:v18.6.1
     environment:
       - CI_SERVER_URL=${DOMAIN}
       - DOCKER_HOST=tcp://socket-proxy:2375
@@ -20,7 +18,11 @@ services:
       - "runnner_config:/etc/gitlab-runner"
     networks:
       - internal
+    secrets:
+      - registration_token
     deploy:
+      labels:
+        - "coop-cloud.${STACK_NAME}.version=0.1.0+18.6.1"
       restart_policy:
         condition: on-failure
 
@@ -65,6 +67,9 @@ services:
 volumes:
   runnner_config:
 
+networks:
+  internal:
+
 secrets:
   registration_token:
     name: ${STACK_NAME}_registration_token_${SECRET_REGISTRATION_TOKEN_VERSION}