---
droneci_version: 1.0.0-rc.3
droneci_service_directory: /var/lib/docker/services/drone-ci
droneci_docker_socket_path: /var/run/docker.sock
droneci_host: http://localhost
droneci_secret: myveryownsecret
# Path to the license key file
# droneci_license_key: # defaults to not set

droneci_restart_policy: always

droneci_server_container_name: drone-server
droneci_server_image: "drone/drone:{{ droneci_version }}"
droneci_server_exposed_port: 8080
droneci_server_exposed_ip: 127.0.0.1
# droneci_server_memory_limit: 512m # defaults to not set
# droneci_server_memory_reservation: 256m # defaults to not set
# droneci_server_extra_hosts: []
droneci_server_privileged: False

droneci_agent_container_name: drone-agent
droneci_agent_image: "drone/agent:{{ droneci_version }}"
droneci_agent_capacity: 2
# droneci_agent_memory_limit: 512m # defaults to not set
# droneci_agent_memory_reservation: 256m # defaults to not set
droneci_agent_privileged: False

droneci_postgres_enabled: False
droneci_postgres_ssl_mode: disable
droneci_postgres_server: postgres.example.com
droneci_postgres_port: 5432
droneci_postgres_superuser: postgres
droneci_postgres_password: secure

droneci_postgres_db:
  name: droneci
  lc_collate: en_US.UTF-8
  lc_ctype: en_US.UTF-8'
  encoding: UTF-8
  template: template0
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_port }}"
  # owner: # defaults to not set
  state: present

droneci_postgres_user:
  name: pgdroneci
  password: droneci
  encrypted: 'yes'
  # priv: # defaults to not set
  # role_attr_flags: # defaults to not set
  db: "{{ droneci_postgres_db.name }}"
  login_host: localhost
  login_user: "{{ droneci_postgres_superuser }}"
  login_password: "{{ droneci_postgres_password }}"
  # login_unix_socket: # defaults to not set
  port: "{{ droneci_postgres_port }}"
  state: present

droneci_gitea_enabled: False
droneci_gitea_server: http://my-git.example.com
droneci_gitea_skip_verify: False
# To enable gitea oauth set both
# droneci_gitea_oauth_client_id: 1111-222-33333-44444 # defaults to not set
# droneci_gitea_oauth_client_secret: 1234abcd5678efgh # defaults to not set

droneci_tls_cert_path: droneci.pem
droneci_tls_key_path: droneci.pem
droneci_tls_source_use_content: False
droneci_tls_source_use_files: True
droneci_tls_cert_source: mycert.pem
droneci_tls_key_source: mykey.pem

droneci_nginx_vhost_enabled: False
droneci_nginx_tls_enabled: True
droneci_nginx_server: myinventoryname
droneci_nginx_vhost_dir: /etc/nginx/sites-available
droneci_nginx_vhost_symlink: /etc/nginx/sites-enabled
droneci_nginx_iptables_enabled: False
droneci_server_name: droneci.example.com
droneci_server_ip: 127.0.0.1
droneci_server_http_port: 8080
droneci_server_proxy_port: "{{ droneci_server_http_port }}"
droneci_server_proxy_protocol: http

# droneci_admin: # defaults to not set
# droneci_http_proxy: # defaults to not set
# droneci_https_proxy: # defaults to not set
# droneci_no_proxy: (see below)
# - drone-server
# - drone-agent