services:
  woodpecker-server:
    image: woodpeckerci/woodpecker-server:{{ woodpecker_version }}
    restart: unless-stopped
    ports:
      - "127.0.0.1:8000:8000"
    volumes:
      - /opt/woodpecker/server-data:/var/lib/woodpecker/
    environment:
      - WOODPECKER_OPEN=false
      - WOODPECKER_HOST={{ woodpecker_host }}
      - WOODPECKER_GITEA=true
      - WOODPECKER_GITEA_URL={{ woodpecker_gitea_url }}
      - WOODPECKER_GITEA_CLIENT={{ woodpecker_gitea_client }}
      - WOODPECKER_GITEA_SECRET={{ woodpecker_gitea_secret }}
      - WOODPECKER_AGENT_SECRET={{ woodpecker_agent_secret }}
      - WOODPECKER_ADMIN={{ woodpecker_admin_user }}
      # ponytail: only this specific plugin image is allow-listed for
      # privileged mode (needed to build images), not privileged mode in
      # general - keep this list as narrow as possible.
      - WOODPECKER_PLUGINS_PRIVILEGED=woodpeckerci/plugin-docker-buildx

  woodpecker-agent:
    image: woodpeckerci/woodpecker-agent:{{ woodpecker_version }}
    command: agent
    restart: unless-stopped
    depends_on:
      - woodpecker-server
    volumes:
      - /opt/woodpecker/agent-config:/etc/woodpecker
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - WOODPECKER_SERVER=woodpecker-server:9000
      - WOODPECKER_AGENT_SECRET={{ woodpecker_agent_secret }}