Woodpecker CI Self-Hosted Pipelines

# docker-compose.yml
services:
  woodpecker-server:
    image: woodpeckerci/woodpecker-server:latest
    ports:
      - "8000:8000"
    environment:
      - WOODPECKER_OPEN=true
      - WOODPECKER_HOST=https://ci.myorg.com
      - WOODPECKER_GITHUB=true
      - WOODPECKER_GITHUB_CLIENT=your-client-id
      - WOODPECKER_GITHUB_SECRET=your-client-secret
      - WOODPECKER_AGENT_SECRET=shared-secret
    volumes:
      - woodpecker-data:/var/lib/woodpecker

  woodpecker-agent:
    image: woodpeckerci/woodpecker-agent:latest
    environment:
      - WOODPECKER_SERVER=woodpecker-server:9000
      - WOODPECKER_AGENT_SECRET=shared-secret
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

# .woodpecker.yml
steps:
  - name: install
    image: node:20-alpine
    commands:
      - npm ci

  - name: lint
    image: node:20-alpine
    commands:
      - npm run lint

  - name: test
    image: node:20-alpine
    commands:
      - npm test

  - name: build
    image: node:20-alpine
    commands:
      - npm run build

  - name: docker
    image: plugins/docker
    settings:
      repo: myorg/order-api
      tags: ${CI_COMMIT_SHA}
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
    when:
      branch: main
      event: push

.woodpecker/
├── test.yml      # Runs on every push
├── build.yml     # Runs on main branch
├── deploy.yml    # Runs on tag
└── security.yml  # Runs weekly

# .woodpecker/test.yml
when:
  event: [push, pull_request]

steps:
  - name: test
    image: node:20-alpine
    commands:
      - npm ci
      - npm test

# .woodpecker/deploy.yml
when:
  event: tag

steps:
  - name: deploy
    image: myorg/deployer:latest
    commands:
      - kubectl set image deployment/order-api order-api=myorg/order-api:${CI_COMMIT_TAG}
    secrets: [kube_config]

services:
  - name: postgres
    image: postgres:16
    environment:
      POSTGRES_DB: test
      POSTGRES_PASSWORD: test

  - name: redis
    image: redis:7-alpine

steps:
  - name: test
    image: node:20-alpine
    environment:
      DATABASE_URL: postgres://postgres:test@postgres:5432/test
      REDIS_URL: redis://redis:6379
    commands:
      - npm ci
      - npm test

matrix:
  NODE_VERSION:
    - "18"
    - "20"
    - "22"

steps:
  - name: test
    image: node:${NODE_VERSION}-alpine
    commands:
      - node --version
      - npm ci
      - npm test

# Woodpecker agent on Kubernetes
apiVersion: apps/v1
kind: Deployment
metadata:
  name: woodpecker-agent
spec:
  replicas: 3
  template:
    spec:
      containers:
        - name: agent
          image: woodpeckerci/woodpecker-agent:latest
          env:
            - name: WOODPECKER_SERVER
              value: "woodpecker-server:9000"
            - name: WOODPECKER_AGENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: woodpecker-secrets
                  key: agent-secret
            - name: WOODPECKER_BACKEND
              value: kubernetes