apiVersion: apps/v1
kind: Deployment
metadata:
  name: drone-server
  labels:
    app: drone
    component: server
spec:
  selector:
    matchLabels:
      app: drone
      component: server
  template:
    metadata:
      labels:
        app: drone
        component: server
    spec:
      containers:
        - name: drone
          image: drone/drone:1.7.0
          env:
            - name: DRONE_SERVER_HOST
              value: ${DRONE_EXTERNAL_HOST}
            - name: DRONE_GITEA_SERVER
              value: https://${GITEA_EXTERNAL_HOST}
            - name: DRONE_GITEA_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: drone-gitea-oauth-secret
                  key: client_id
            - name: DRONE_GITEA_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: drone-gitea-oauth-secret
                  key: client_secret
            - name: DRONE_RPC_SECRET
              valueFrom:
                secretKeyRef:
                  name: drone-secret
                  key: rpc_secret
          ports:
            - name: http
              containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: drone
  labels:
    app: drone
spec:
  selector:
    app: drone
    component: server
  ports:
    - name: http
      protocol: TCP
      port: 80
      targetPort: http
---
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: drone
  labels:
    app: drone
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
    cert-manager.io/cluster-issuer: letsencrypt
spec:
  tls:
    - hosts:
        - drone.127.0.0.1.nip.io
      secretName: letsencrypt-cert
  rules:
  - host: drone.127.0.0.1.nip.io
    http:
      paths:
      - path: /
        backend:
          serviceName: drone
          servicePort: http