From 1e04aa6c4eed983de6688eeacf16a70cfa9c7371 Mon Sep 17 00:00:00 2001
From: Robert Kaussow <mail@thegeeklab.de>
Date: Fri, 28 Jan 2022 11:21:32 +0100
Subject: [PATCH] chore: add variable droneci_privileged and disable privileged
 by default

---
 defaults/main.yml                         | 2 ++
 templates/services/droneci_compose.yml.j2 | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index 1d7f980..5ccdb46 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -54,6 +54,8 @@ droneci_networks_applied:
 # @var droneci_memory_reservation: $ "_unset_"
 # @var droneci_memory_reservation:example: $ "256m"
 
+droneci_privileged: False
+
 droneci_db_type: sqlite
 droneci_db_server: localhost
 droneci_db_port: 5432
diff --git a/templates/services/droneci_compose.yml.j2 b/templates/services/droneci_compose.yml.j2
index 6960d88..4c07f7d 100644
--- a/templates/services/droneci_compose.yml.j2
+++ b/templates/services/droneci_compose.yml.j2
@@ -31,7 +31,7 @@ services:
       - {{ host | quote }}
       {% endfor %}
     {% endif %}
-    privileged: true
+    privileged: {{ droneci_privileged | bool | lower }}
     environment:
       - DRONE_SERVER_HOST={{ droneci_host | urlsplit('hostname') }}
       - DRONE_SERVER_PROTO={{ droneci_host | urlsplit('scheme') }}