vaultwarden/.drone.yml

---
kind: pipeline
name: test

platform:
  os: linux
  arch: amd64

steps:
  - name: markdownlint
    image: thegeeklab/markdownlint-cli
    commands:
      - markdownlint 'README.md'

trigger:
  ref:
    - refs/heads/main
    - refs/pull/**
    - refs/tags/**

---
kind: pipeline
name: build-container

platform:
  os: linux
  arch: amd64

steps:
  - name: binary
    image: clux/muslrust:stable
    commands:
      - apt-get -qq update && apt-get install -yqq --no-install-recommends libpq-dev
      - make build

  - name: verify
    image: alpine
    commands:
      - src/target/x86_64-unknown-linux-musl/release/vaultwarden --help
      - src/target/x86_64-unknown-linux-musl/release/vaultwarden --version
    depends_on:
      - binary

  - name: dryrun
    image: thegeeklab/drone-docker-buildx:23
    settings:
      dockerfile: Dockerfile
      dry_run: true
      provenance: false
      repo: thegeeklab/${DRONE_REPO_NAME}
    when:
      ref:
        - refs/pull/**
    depends_on:
      - verify

  - name: tags
    image: thegeeklab/docker-autotag
    environment:
      DOCKER_AUTOTAG_FORCE_LATEST: True
      DOCKER_AUTOTAG_IGNORE_PRERELEASE: True
      DOCKER_AUTOTAG_OUTPUT_FILE: .tags
      DOCKER_AUTOTAG_VERSION: ${DRONE_TAG}
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - dryrun

  - name: changelog-generate
    image: thegeeklab/git-chglog
    commands:
      - git fetch -tq
      - git-chglog --no-color --no-emoji -o CHANGELOG.md ${DRONE_TAG:---next-tag unreleased unreleased}
    depends_on:
      - tags

  - name: changelog-format
    image: thegeeklab/alpine-tools
    commands:
      - prettier CHANGELOG.md
      - prettier -w CHANGELOG.md
    depends_on:
      - changelog-generate

  - name: publish-dockerhub
    image: thegeeklab/drone-docker-buildx:23
    settings:
      dockerfile: Dockerfile
      password:
        from_secret: docker_password
      provenance: false
      repo: thegeeklab/${DRONE_REPO_NAME}
      username:
        from_secret: docker_username
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - changelog-format

  - name: publish-quay
    image: thegeeklab/drone-docker-buildx:23
    settings:
      dockerfile: Dockerfile
      password:
        from_secret: quay_password
      provenance: false
      registry: quay.io
      repo: quay.io/thegeeklab/${DRONE_REPO_NAME}
      username:
        from_secret: quay_username
    when:
      ref:
        - refs/heads/main
        - refs/tags/**
    depends_on:
      - changelog-format

  - name: publish-gitea
    image: plugins/gitea-release
    settings:
      api_key:
        from_secret: gitea_token
      base_url: https://gitea.rknet.org
      note: CHANGELOG.md
      overwrite: true
      title: ${DRONE_TAG}
    when:
      ref:
        - refs/tags/**
    depends_on:
      - publish-dockerhub
      - publish-quay

trigger:
  ref:
    - refs/heads/main
    - refs/pull/**
    - refs/tags/**

depends_on:
  - test

---
kind: pipeline
name: notifications

platform:
  os: linux
  arch: amd64

steps:
  - name: pushrm-dockerhub
    image: chko/docker-pushrm:1
    environment:
      DOCKER_PASS:
        from_secret: docker_password
      DOCKER_USER:
        from_secret: docker_username
      PUSHRM_FILE: README.md
      PUSHRM_SHORT: Custom image for Vaultwarden password manager
      PUSHRM_TARGET: thegeeklab/${DRONE_REPO_NAME}
    when:
      status:
        - success

  - name: pushrm-quay
    image: chko/docker-pushrm:1
    environment:
      APIKEY__QUAY_IO:
        from_secret: quay_token
      PUSHRM_FILE: README.md
      PUSHRM_TARGET: quay.io/thegeeklab/${DRONE_REPO_NAME}
    when:
      status:
        - success

  - name: matrix
    image: thegeeklab/drone-matrix
    settings:
      homeserver:
        from_secret: matrix_homeserver
      password:
        from_secret: matrix_password
      roomid:
        from_secret: matrix_roomid
      template: "Status: **{{ .Build.Status }}**<br/> Build: [{{ .Repo.Owner }}/{{ .Repo.Name }}]({{ .Build.Link }}){{ if .Build.Branch }} ({{ .Build.Branch }}){{ end }} by {{ .Commit.Author }}<br/> Message: {{ .Commit.Message.Title }}"
      username:
        from_secret: matrix_username
    when:
      status:
        - success
        - failure

trigger:
  ref:
    - refs/heads/main
    - refs/tags/**
  status:
    - success
    - failure

depends_on:
  - build-container

---
kind: signature
hmac: 4ba2b1c8e702a25d354563333c9c332383f4887a64f7d5af37c054c31149119b

...