.drone.yml

---
kind: pipeline
type: docker
name: gitleaks

trigger:
  branch:
    - main
  event:
    - push

steps:
  - name: gitleaks-check
    image: ghcr.io/gitleaks/gitleaks:latest
    commands:
      - gitleaks detect --source ./
      - gitleaks detect --no-git --source ./

  - name: send-notification
    image: appleboy/drone-discord
    settings:
      webhook_id:
        from_secret: discord_webhook_id
      webhook_token:
        from_secret: discord_webhook_token
      username: Drone
      message: "🚨 Gitleaks issue 🚨"
    when:
      status:
        - failure

---
kind: pipeline
type: docker
name: manage-unraid-icons

depends_on:
  - gitleaks

trigger:
  branch:
    - main
  event:
    - push
  paths:
    include:
      - .drone.yml
      - unraid-homelab/icons/**

volumes:
  - name: appdata
    host:
      path: /mnt/user/appdata/

steps:
  - name: sync-icons
    image: alpine:edge
    volumes:
      - name: appdata
        path: /appdata
    commands:
      - apk update && apk add rsync
      - mkdir -p /appdata/icons/
      - rsync -rv --delete --delete-excluded unraid-homelab/icons/ /appdata/icons/
      - chown -R 1000:1000 /appdata/icons
      - find /appdata/icons -type d -exec chmod 0755 {} \;
      - find /appdata/icons -type f -exec chmod 0644 {} \;
    when:
      paths:
        include:
          - unraid-homelab/icons/**

  - name: send-notification
    image: appleboy/drone-discord
    settings:
      webhook_id:
        from_secret: discord_webhook_id
      webhook_token:
        from_secret: discord_webhook_token
      username: Drone
      message: "❌ Failed to synchronise unraid docker icons folder 📷"
    when:
      status:
        - failure


---
kind: pipeline
type: docker
name: check-and-deploy

depends_on:
  - gitleaks

trigger:
  branch:
    - main
  event:
    - push
  paths:
    include:
      - .drone.yml
      - unraid-homelab/**
    exclude:
      - unraid-homelab/icons

workspace:
  path: /drone/src

volumes:
  - name: appdata
    host:
      path: /mnt/user/appdata/
  - name: dockersock
    host:
      path: /var/run/docker.sock

steps:
  - name: compose-config-check
    image: alpine:edge
    volumes:
      - name: dockersock
        path: /var/run/docker.sock
    environment:
      SOPS_AGE_KEY:
        from_secret: age-key
    commands:
      - apk update && apk add docker-compose sops
      - cd unraid-homelab/
      - sops exec-env secrets.encoded.env 'docker-compose -f docker-compose.yaml config' > /dev/null
    when:
      paths:
        include:
          - unraid-homelab/**

  - name: move-recyclarr-config
    image: alpine:edge
    volumes:
      - name: appdata
        path: /appdata
    environment:
      SOPS_AGE_KEY:
        from_secret: age-key
    commands:
      - apk update && apk add sops envsubst
      - cd unraid-homelab/ && mkdir -p /appdata/recyclarr/
      - sops exec-env secrets.encoded.env 'cat ./media/recyclarr/recyclarr.yaml | envsubst' > /appdata/recyclarr/recyclarr.yaml
      - echo "recyclarr" >> restart.containers
    when:
      paths:
        include:
          - unraid-homelab/**/recyclarr/recyclarr.yaml
    depends_on:
      - compose-config-check


  - name: move-authelia-config
    image: alpine:edge
    volumes:
      - name: appdata
        path: /appdata
    environment:
      SOPS_AGE_KEY:
        from_secret: age-key
    commands:
      - apk update && apk add sops envsubst
      - cd unraid-homelab/ && mkdir -p /appdata/authelia/
      - sops exec-env secrets.encoded.env 'cat ./security/authelia/configuration.yml | envsubst' > /appdata/authelia/config/configuration.yml
      - echo "authelia" >> restart.containers
    when:
      paths:
        include:
          - unraid-homelab/**/authelia/configuration.yml
    depends_on:
      - compose-config-check

  - name: move-traefik-config
    image: alpine:edge
    volumes:
      - name: appdata
        path: /appdata
    environment:
      SOPS_AGE_KEY:
        from_secret: age-key
    commands:
      - apk update && apk add sops envsubst
      - cd unraid-homelab/ && mkdir -p /appdata/traefik/
      - sops exec-env secrets.encoded.env 'cat ./ingress/traefik/configFile.yaml | envsubst' > /appdata/traefik/configFile.yaml
      - echo "traefik" >> restart.containers
    when:
      paths:
        include:
          - unraid-homelab/**/traefik/configFile.yaml
    depends_on:
      - compose-config-check

  - name: deploy
    image: alpine:edge
    volumes:
      - name: dockersock
        path: /var/run/docker.sock
    environment:
      SOPS_AGE_KEY:
        from_secret: age-key
    commands:
      - apk update && apk add docker-compose sops
      - cd unraid-homelab/
      - sops exec-env secrets.encoded.env 'docker-compose -f docker-compose.yaml up --detach --quiet-pull --remove-orphans --wait'
      - if [ -f ./restart.containers ]; then sops exec-env secrets.encoded.env 'docker-compose -f docker-compose.yaml restart $(cat restart.containers)'; fi
    when:
      paths:
        include:
          - unraid-homelab/**
    depends_on:
      - compose-config-check
      - move-recyclarr-config
      - move-authelia-config
      - move-traefik-config

  - name: send-notification
    image: appleboy/drone-discord
    settings:
      webhook_id:
        from_secret: discord_webhook_id
      webhook_token:
        from_secret: discord_webhook_token
      username: Drone
      message: "❌ 📦 Docker stack update failed"
    depends_on:
      - deploy
    when:
      status:
        - failure

---
kind: pipeline
type: docker
name: global-notification

depends_on:
  - gitleaks
  - manage-unraid-icons
  - check-and-deploy

trigger:
  branch:
    - main
  event:
    - push
  status:
    - failure

steps:
  - name: send-notification
    image: appleboy/drone-discord
    settings:
      webhook_id:
        from_secret: discord_webhook_id
      webhook_token:
        from_secret: discord_webhook_token
      username: Drone
      message: "{{#success build.status}} ✅  Build #{{build.number}} from `{{repo.name}}` succeeded.\n\n📝 Commit by {{commit.author}} on `{{commit.branch}}`:\n``` {{commit.message}} ```\n🌐 {{ build.link }}\n\n ✅ duration: {{duration build.started build.finished}} \n ✅ started: {{datetime build.started \"2006/01/02 15:04\" \"Europe/Paris\"}} \n ✅ finished: {{datetime build.finished \"2006/01/02 15:04\" \"Europe/Paris\"}} {{else}} ❌  Build #{{build.number}} from `{{repo.name}}` failed.\n\n📝 Commit by {{commit.author}} on `{{commit.branch}}`:\n``` {{commit.message}} ```\n🌐 {{ build.link }}\n\n ✅ duration: {{duration build.started build.finished}} \n ✅ started: {{datetime build.started \"2006/01/02 15:04\" \"Europe/Paris\"}} \n ✅ finished: {{datetime build.finished \"2006/01/02 15:04\" \"Europe/Paris\"}}{{/success}}\n"