---
droneci_version: 1.4.0
droneci_service_directory: /var/lib/docker/services/drone-ci
droneci_docker_socket_path: /var/run/docker.sock
droneci_host: http://localhost
droneci_secret: myveryownsecret

# @var droneci_license_key:description Path to the license key file
# @var droneci_license_key: $ "_unset_"

droneci_restart_policy: always

droneci_server_container_name: drone-server
droneci_server_image: "drone/drone:{{ droneci_version }}"
droneci_server_exposed_port: 8080
droneci_server_exposed_ip: 127.0.0.1

# @var droneci_server_memory_limit: $ "_unset_"
# @var droneci_server_memory_limit:example: $ "512m"
# @var droneci_server_memory_reservation: $ "_unset_"
# @var droneci_server_memory_reservation:example: $ "256m"

droneci_server_extra_hosts: []

droneci_server_privileged: False

droneci_agent_container_name: drone-agent
droneci_agent_image: "drone/agent:{{ droneci_version }}"
droneci_agent_capacity: 2

# @var droneci_agent_memory_limit:example: $ "512m"
# @var droneci_agent_memory_limit: $ "_unset_"
# @var droneci_agent_memory_reservation:example: $ "256m"
# @var droneci_agent_memory_reservation: $ "_unset_"

droneci_agent_privileged: False

droneci_postgres_enabled: False
droneci_postgres_ssl_mode: disable
droneci_postgres_server: postgres.example.com
droneci_postgres_port: 5432
droneci_postgres_superuser: postgres
droneci_postgres_password: secure

droneci_postgres_db:
  name: droneci
  lc_collate: en_US.UTF-8
  lc_ctype: en_US.UTF-8'
  encoding: UTF-8
  template: template0
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_port }}"
  # owner: # defaults to not set
  state: present

droneci_postgres_user:
  name: pgdroneci
  password: droneci
  encrypted: 'yes'
  # priv: # defaults to not set
  # role_attr_flags: # defaults to not set
  db: "{{ droneci_postgres_db.name }}"
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_port }}"
  state: present

droneci_gitea_enabled: False
droneci_gitea_server: http://my-git.example.com
droneci_gitea_skip_verify: False

# To enable gitea oauth set both
# droneci_gitea_oauth_client_id: 1111-222-33333-44444 # defaults to not set
# droneci_gitea_oauth_client_secret: 1234abcd5678efgh # defaults to not set

# @var droneci_admin: $ "_unset_"
# @var droneci_http_proxy: $ "_unset_"
# @var droneci_https_proxy: $ "_unset_"

# @var droneci_no_proxy: $ ["drone-server", "drone-agent"]
droneci_no_proxy: []

droneci_iptables_enabled: False
droneci_open_ports:
  - name: allow_droneci_web
    rules: |
      -A INPUT -m state --state NEW -p tcp --dport {{ droneci_server_exposed_port }} -j ACCEPT
    state: present