---
droneci_version: 0.8
droneci_service_directory: /var/lib/docker/services/drone-ci
droneci_docker_socket_path: /var/run/docker.sock
droneci_host: http://localhost
droneci_secret: myveryownsecret

droneci_server_image: "drone/drone:{{ droneci_version }}"
droneci_server_restart_policy: always
droneci_server_exposed_port: 8080

droneci_agent_image: "drone/agent:{{ droneci_version }}"
droneci_agent_restart_policy: always

droneci_postgres_enabled: False
droneci_postgres_ssl_mode: disable
droneci_postgres_server: postgres.example.com:5432
droneci_postgres_superuser: postgres
droneci_postgres_password: secure

droneci_postgres_db:
  name: droneci
  lc_collate: en_US.UTF-8
  lc_ctype: en_US.UTF-8'
  encoding: UTF-8
  template: template0
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_server | urlsplit('port') }}"
  # owner: # defaults to not set
  state: present

droneci_postgres_user:
  name: pgdroneci
  password: droneci
  encrypted: 'yes'
  # priv: # defaults to not set
  # role_attr_flags: # defaults to not set
  db: "{{ droneci_postgres_db.name }}"
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_server | urlsplit('port') }}"
  state: present

droneci_gitea_enabled: False
droneci_gitea_host: http://my-git.example.com
# droneci_gitea_git_user: # default not set
# droneci_gitea_git_password: # default not set
droneci_gitea_private_mode_enabled: False
droneci_gitea_skip_verify_enabled: False

droneci_tls_cert_path: droneci.pem
droneci_tls_key_path: droneci.pem
droneci_tls_source_use_content: False
droneci_tls_source_use_files: True
droneci_tls_cert_source: mycert.pem
droneci_tls_key_source: mykey.pem

droneci_nginx_vhost_enabled: False
droneci_nginx_tls_enabled: True
droneci_nginx_server: myinventoryname
droneci_nginx_vhost_dir: /etc/nginx/sites-available
droneci_nginx_vhost_symlink: /etc/nginx/sites-enabled
droneci_nginx_iptables_enabled: False
droneci_server_name: droneci.example.com
droneci_server_ip: 127.0.0.1
droneci_server_http_port: 8080
droneci_server_proxy_port: "{{ droneci_server_http_port }}"
droneci_server_proxy_protocol: http

droneci_pass_ca_enabled: False
droneci_ca_path: /etc/pki/tls/certs/ca-bundle.crt

# droneci_admins: # defaults to not set
# droneci_http_proxy: # defaults to not set
# droneci_https_proxy: # defaults to not set
# droneci_no_proxy: (see below)
# - drone-server
# - drone-agent