---
hiera_include:
  - profiles::base::datavol
  - docker
  - droneci::runner

docker::version: latest
docker::curl_ensure: false

droneci::runner::ports:
  - 3000:3000
droneci::runner::volumes:
  - type=bind,source=/var/run/docker.sock,target=/var/run/docker.sock
  - type=bind,source=/data,target=/data
  - type=bind,source=/etc/pki/tls/vault/certificate.crt,target=/etc/pki/tls/vault/certificate.crt,readonly
  - type=bind,source=/etc/pki/tls/vault/private.key,target=/etc/pki/tls/vault/private.key,readonly
  - type=bind,source=/etc/pki/tls/certs/ca-bundle.crt,target=/etc/pki/tls/certs/ca-bundle.crt,readonly
  - type=bind,source=/etc/pki/tls/certs/ca-bundle.crt,target=/etc/ssl/certs/ca-certificates.crt,readonly
droneci::runner::env_vars:
  DRONE_RPC_PROTO: https
  DRONE_RPC_HOST: droneci.query.consul
  DRONE_RPC_SECRET: "%{hiera('droneci_server::rpc_secret')}"
  DRONE_RUNNER_CAPACITY: 2
  DRONE_RUNNER_NAME: "%{facts.networking.fqdn}"
  DRONE_RUNNER_VOLUMES: /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt