diff options
author | Alex Auvolat <alex@adnab.me> | 2021-01-16 17:07:01 +0100 |
---|---|---|
committer | Alex Auvolat <alex@adnab.me> | 2021-01-16 17:07:01 +0100 |
commit | c74dc92febd1841c8ea5ff31caab0f941d57527d (patch) | |
tree | d05a203d95cac988952799667ec43c327a5d9038 /app/seafile/deploy | |
parent | 0c4ee40e01c95d7bf73236cbead5cc261f67eb9d (diff) | |
download | infrastructure-c74dc92febd1841c8ea5ff31caab0f941d57527d.tar.gz infrastructure-c74dc92febd1841c8ea5ff31caab0f941d57527d.zip |
Proposal: reorganize app/ folder by modules
Diffstat (limited to 'app/seafile/deploy')
-rw-r--r-- | app/seafile/deploy/seafile.hcl | 222 |
1 files changed, 222 insertions, 0 deletions
diff --git a/app/seafile/deploy/seafile.hcl b/app/seafile/deploy/seafile.hcl new file mode 100644 index 0000000..d8488d2 --- /dev/null +++ b/app/seafile/deploy/seafile.hcl @@ -0,0 +1,222 @@ +job "seafile" { + datacenters = ["dc1"] + type = "service" + priority = 10 + + constraint { + attribute = "${attr.cpu.arch}" + value = "amd64" + } + + group "main" { + count = 1 + + network { + port "seafile-frontend_port" { static = 8000 } + port "seafile-seafhttp_port" { static = 8083 } + port "seafile-dav_port" { static = 8084 } + port "seafile-hack_port" { static = 8085 } + port "mariadb_port" { static = 3306 } + } + + task "mariadb" { + driver = "docker" + config { + image = "superboum/amd64_mariadb:v4" + network_mode = "host" + command = "tail" + ports = [ "mariadb_port" ] + args = [ + "-f", "/var/log/mysql/error.log", + ] + volumes = [ + "/mnt/glusterfs/mariadb/main/server:/var/lib/mysql", + ] + } + + template { + data = file("../config/mariadb/main/env.tpl") + destination = "secrets/env" + env = true + } + + resources { + memory = 800 + } + + service { + tags = ["mariadb"] + port = "mariadb_port" + address_mode = "host" + name = "mariadb" + check { + type = "tcp" + port = "mariadb_port" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + } + + + task "hack" { + driver = "docker" + config { + image = "alpine/socat:1.0.5" + network_mode = "host" + ports = [ "seafile-hack_port" ] + command = "tcp6-listen:8085,fork,reuseaddr" + args = [ "tcp-connect:127.0.0.1:8083" ] + } + resources { + memory = 10 + } + service { + tags = [ + "seafile", + "traefik.enable=true", + "traefik.frontend.entryPoints=https,http", + "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefixStrip:/seafhttp" + + ] + port = "seafile-hack_port" + address_mode = "host" + name = "seafhttp" + check { + type = "tcp" + port = "seafile-hack_port" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + } + + task "server" { + driver = "docker" + config { + image = "superboum/amd64_seafile:v6" + network_mode = "host" + ports = [ "seafile-frontend_port", "seafile-dav_port", "seafile-seafhttp_port" ] + + ## cmd + args are used for running an instance attachable for update + # command = "/bin/sleep" + # args = ["999999"] + + mounts = [ + { + type = "bind" + source = "/mnt/glusterfs/seafile" + target = "/mnt/seafile-data" + } + ] + + volumes = [ + "secrets/conf:/srv/webstore/conf", + "secrets/ccnet:/srv/webstore/ccnet" + ] + } + + resources { + memory = 600 + } + + service { + tags = [ + "seafile", + "traefik.enable=true", + "traefik.frontend.entryPoints=https,http", + "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefix:/" + ] + port = "seafile-frontend_port" + address_mode = "host" + name = "seahub" + check { + type = "tcp" + port = "seafile-frontend_port" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + service { + tags = [ + "seafile", + "traefik.enable=true", + "traefik.frontend.entryPoints=https,http", + "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefix:/seafdav" + + ] + port = "seafile-dav_port" + address_mode = "host" + name = "seafdav" + check { + type = "tcp" + port = "seafile-dav_port" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + template { + data = file("../config/conf/ccnet.conf.tpl") + destination = "secrets/conf/ccnet.conf" + } + + template { + data = file("../config/conf/seafile.conf.tpl") + destination = "secrets/conf/seafile.conf" + } + + template { + data = file("../config/conf/seahub_settings.py.tpl") + destination = "secrets/conf/seahub_settings.py" + } + + template { + data = file("../config/ccnet/seafile.ini") + destination = "secrets/ccnet/seafile.ini" + } + template { + data = file("../config/conf/seafdav.conf") + destination = "secrets/conf/seafdav.conf" + } + template { + data = file("../config/conf/gunicorn.conf") + destination = "secrets/conf/gunicorn.conf" + } + + # ---- secrets ---- + template { + data = "{{ key \"secrets/seafile/conf/mykey.peer\" }}" + destination = "secrets/ccnet/mykey.peer" + } + + template { + data = "{{ key \"secrets/seafile/conf/mykey.peer\" }}" + destination = "secrets/conf/mykey.peer" + } + } + } +} + |