Woodpecker CI

Description / name	Input element
Container Registry
Container Configuration Root Path
Timezone
User ID
Group ID
Woodpecker CI Host Port
Woodpecker CI /config Path

Lightweight CI/CD pipeline server with a built-in agent — integrates with Gitea, GitHub, and GitLab for automated builds and deployments.


Port	`8000`
Registry	`ghcr.io/daemonless/woodpecker`
Daemonless	daemonless/woodpecker
Source	woodpecker-ci/woodpecker
Website	woodpecker-ci.org

Version Tags

Tag	Description	Best For
`latest`	Upstream Binary. Built from official release.	Most users — recommended.

Parts

Service	Image	Role
woodpecker	`ghcr.io/daemonless/woodpecker:latest`		docs
woodpecker-agent	`ghcr.io/daemonless/woodpecker:latest`		docs

Before deploying, ensure your host environment is ready. See the Quick Start Guide for host setup instructions, including the security model for host vs. container privileges.

Deployment

Podman AppJail

1. Save as .env and fill in what is empty:

# Woodpecker CI for FreeBSD (Daemonless)
# Copy to .env and edit. Forge settings (WOODPECKER_GITEA=true,
# WOODPECKER_GITEA_URL, client id/secret ...) go in here too; the server reads
# this file. See https://woodpecker-ci.org/docs/administration/configuration/server

# External URL of this server (what browsers and the forge use)
WOODPECKER_HOST=http://localhost:8000

# Shared secret between server and agent. Change this, e.g. `openssl rand -hex 32`
WOODPECKER_AGENT_SECRET=change-me-to-a-long-random-string

# Where data lives on the host
SERVER_DATA_LOCATION=/containers/woodpecker/server
AGENT_DATA_LOCATION=/containers/woodpecker/agent

# Timezone (TZ identifier)
TZ=UTC

2. Save as compose.yaml:

name: woodpecker

services:
  woodpecker:
    image: ghcr.io/daemonless/woodpecker:latest
    container_name: woodpecker-server
    restart: unless-stopped
    network_mode: host
    environment:
      - WOODPECKER_SERVER_ENABLE=true
      - WOODPECKER_HOST=${WOODPECKER_HOST}
      - WOODPECKER_DATABASE_DRIVER=sqlite3
      - WOODPECKER_DATABASE_DATASOURCE=/config/woodpecker.sqlite
      - WOODPECKER_AGENT_SECRET=${WOODPECKER_AGENT_SECRET}
      - PUID=1000
      - PGID=1000
      - TZ=${TZ:-UTC}
    env_file:
      - .env
    volumes:
      - ${SERVER_DATA_LOCATION}:/config
    ports:
      - "8000:8000"
      - "9000:9000"

  woodpecker-agent:
    image: ghcr.io/daemonless/woodpecker:latest
    container_name: woodpecker-agent
    restart: unless-stopped
    network_mode: host
    depends_on:
      - woodpecker
    environment:
      - WOODPECKER_AGENT_ENABLE=true
      - WOODPECKER_SERVER=${WOODPECKER_SERVER_HOSTNAME:-localhost}:9000
      - WOODPECKER_AGENT_SECRET=${WOODPECKER_AGENT_SECRET}
      - PUID=1000
      - PGID=1000
      - TZ=${TZ:-UTC}
    volumes:
      - ${AGENT_DATA_LOCATION}:/config

Then run podman-compose up -d.

Director

# .env

DIRECTOR_PROJECT=woodpecker
WOODPECKER_SERVER_ENABLE=true
WOODPECKER_HOST=http://localhost:8000
WOODPECKER_DATABASE_DRIVER=sqlite3
WOODPECKER_DATABASE_DATASOURCE=/config/woodpecker.sqlite
WOODPECKER_AGENT_SECRET=change-me-to-a-long-random-string
PUID=1000
PGID=1000
TZ=UTC
SERVER_DATA_LOCATION=/containers/woodpecker/server
AGENT_DATA_LOCATION=/containers/woodpecker/agent

# appjail-director.yml

options:
  - alias:
  - ip4_inherit:
services:
  woodpecker:
    name: woodpecker
    options:
      - container: 'args:--pull'
    oci:
      user: root
      environment:
        - WOODPECKER_SERVER_ENABLE: !ENV '${WOODPECKER_SERVER_ENABLE}'
        - WOODPECKER_HOST: !ENV '${WOODPECKER_HOST}'
        - WOODPECKER_DATABASE_DRIVER: !ENV '${WOODPECKER_DATABASE_DRIVER}'
        - WOODPECKER_DATABASE_DATASOURCE: !ENV '${WOODPECKER_DATABASE_DATASOURCE}'
        - WOODPECKER_AGENT_SECRET: !ENV '${WOODPECKER_AGENT_SECRET}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - SERVER_DATA_LOCATION: !ENV '${SERVER_DATA_LOCATION}'
        - AGENT_DATA_LOCATION: !ENV '${AGENT_DATA_LOCATION}'
    volumes:
      - WOODPECKER_CONFIG_PATH: /config
  woodpecker-agent:
    name: woodpecker_agent
    options:
      - from: ghcr.io/daemonless/woodpecker:latest
      - template: !ENV '${PWD}/template.conf'
    oci:
      environment:
        - WOODPECKER_AGENT_ENABLE: "true"
        - WOODPECKER_SERVER: !ENV '${WOODPECKER_SERVER_HOSTNAME:localhost}:9000'
        - WOODPECKER_AGENT_SECRET: !ENV '${WOODPECKER_AGENT_SECRET}'
        - PUID: "1000"
        - PGID: "1000"
        - TZ: !ENV '${TZ}'
    volumes:
      - agent_data: /config
volumes:
  WOODPECKER_CONFIG_PATH:
    device: '/containers/woodpecker'
  agent_data:
    device: !ENV '${AGENT_DATA_LOCATION}'

# Makejail

ARG tag=latest

OPTION container=boot
OPTION overwrite=force
OPTION from=ghcr.io/daemonless/woodpecker:${tag}

Save the files above, then run appjail-director up.

Open http://<server>:8000 from another machine (the server's own browser can't use a published port).

Interactive Configuration

Parameters

Environment Variables

Variable	Default	Description
`WOODPECKER_SERVER_ENABLE`	`true`	Enable Woodpecker Server (true/false)
`WOODPECKER_HOST`	`http://localhost:8000`	The external URL of this server, e.g. https://ci.example.com
`WOODPECKER_DATABASE_DRIVER`	`sqlite3`	Database driver (sqlite3 or postgres)
`WOODPECKER_DATABASE_DATASOURCE`	`/config/woodpecker.sqlite`	Database connection string or file path
`WOODPECKER_AGENT_SECRET`	`change-me-to-a-long-random-string`	Shared secret for server-agent communication
`PUID`	`1000`
`PGID`	`1000`
`TZ`	`UTC`	Timezone for the containers
`WOODPECKER_SERVER_HOSTNAME`	``	Where the agent finds the server (fjord sets this; localhost on host networking)
`SERVER_DATA_LOCATION`	`/containers/woodpecker/server`	Path to store the server's data (database, logs)
`AGENT_DATA_LOCATION`	`/containers/woodpecker/agent`	Path to store the agent's data
`WOODPECKER_AGENT_ENABLE`	``	Enable Woodpecker Agent (true/false)
`WOODPECKER_GITEA`	``	Enable Gitea authentication (true/false)
`WOODPECKER_GITEA_URL`	``	The URL of the Gitea server

Volumes

Path	Description
`/config`	Data directory (database, logs)

Ports

Port	Protocol	Description
`8000`	TCP	Server Web UI/API
`9000`	TCP	GRPC (Server/Agent communication)

Implementation Details

Architectures: amd64
User: bsd (UID/GID set via PUID/PGID). Defaults to 1000:1000.
Base: Built on ghcr.io/daemonless/base (FreeBSD 15.1).

Need help? Join our Discord community.