blallo/ansible_drone
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

feat(database): encryption of secrets stored in the database

Browse Source
This commit is contained in:
Bo-Yi Wu 2019-06-20 22:17:09 +08:00
parent b17a8f1bb1
commit e42fbe73f4
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
defaults/main.yml
View File

@ -1,3 +1,4 @@
# server setting
drone_server_enable: "false" drone_server_enable: "false"
drone_agent_enable: "false" drone_agent_enable: "false"
drone_version: "latest" drone_version: "latest"
@ -9,23 +10,27 @@ drone_rpc_server: "http://drone-server"
drone_runner_capacity: "3" drone_runner_capacity: "3"
drone_host_port: "8080" drone_host_port: "8080"
# github setting
drone_github_server: "https://github.com" drone_github_server: "https://github.com"
drone_github_client_id: "" drone_github_client_id: ""
drone_github_client_secret: "" drone_github_client_secret: ""
drone_github_debug: "false" drone_github_debug: "false"
# gitlab setting
drone_gitlab_server: "https://gitlab.com" drone_gitlab_server: "https://gitlab.com"
drone_gitlab_client_id: "" drone_gitlab_client_id: ""
drone_gitlab_client_secret: "" drone_gitlab_client_secret: ""
drone_gitlab_skip_verify: "false" drone_gitlab_skip_verify: "false"
drone_gitlab_debug: "false" drone_gitlab_debug: "false"
# gitea setting
drone_gitea_server: "" drone_gitea_server: ""
drone_gitea_client_id: "" drone_gitea_client_id: ""
drone_gitea_client_secret: "" drone_gitea_client_secret: ""
drone_gitea_skip_verify: "false" drone_gitea_skip_verify: "false"
drone_gitea_debug: "false" drone_gitea_debug: "false"
# database setting
drone_database_driver: "sqlite" drone_database_driver: "sqlite"
drone_sqlite_dir: "/var/lib/drone" drone_sqlite_dir: "/var/lib/drone"
drone_postgres_data_dir: "/var/lib/postgresql/data" drone_postgres_data_dir: "/var/lib/postgresql/data"

3
templates/drone-server.env.j2
View File

@ -8,6 +8,9 @@ DRONE_TLS_AUTOCERT=false
{% if drone_rpc_secret is defined %} {% if drone_rpc_secret is defined %}
DRONE_RPC_SECRET={{ drone_rpc_secret }} DRONE_RPC_SECRET={{ drone_rpc_secret }}
{% endif %} {% endif %}
{% if drone_database_secret is defined and drone_database_secret != "" %}
DRONE_DATABASE_SECRET={{ drone_database_secret }}
{% endif %}
DRONE_AGENTS_ENABLED=true DRONE_AGENTS_ENABLED=true
{% if drone_logs_pretty is defined %} {% if drone_logs_pretty is defined %}
DRONE_LOGS_PRETTY={{ drone_logs_pretty }} DRONE_LOGS_PRETTY={{ drone_logs_pretty }}