Bootstrapping

• install docker-engine
• install docker-compose
• install yq (used for garbage collection)
• git-crypt unlock
• docker network create traefik

Install Drone Exec Runner

• create a user called drone
• add drone to docker group
• install exec runner according to docs
  • create config in /home/drone/.drone-exec-runner/config:

    DRONE_RPC_PROTO=https
    DRONE_RPC_HOST=drone.rknt.de
    DRONE_RPC_SECRET=super-secret-sauce
    DRONE_HTTP_BIND=:3001
    DRONE_LOG_FILE=.drone-runner-exec/log.txt
    DRONE_LIMIT_TRUSTED=true
    DRONE_LIMIT_EVENTS=rknt/rknt-server
    

    binding to port 3001 to avoid collision with docker runner
  • drone-exec-runner service install
  • define user and group in /etc/systemd/system/drone-exec-runner.service

    [Service]
    User=drone
    Group=drone
    

• set rknt/rknt-server repo to trusted on https://drone.rknt.de

Notes on Nextcloud

• needed to manually set trusted_domain in config_php as env setting didn't take hold
• 'overwriteprotocol' => 'https' needed in config.php to allow initial password reset

Notes on Github/Gitlab integration

• DRONE_SERVER_PROTO is set to http as traefik terminates SSL for us. This means you have to manually tweak the webhook settings in Github/Gitlab to use an https address.