Merge pull request 'Reorganize app/ and add script for secret management' (#29) from test_reorganize into master

Reviewed-on: https://git.deuxfleurs.fr/Deuxfleurs/infrastructure/pulls/29

1 files changed, 62 insertions, 0 deletions

diff --git a/app/web_static/deploy/web_static.hcl b/app/web_static/deploy/web_static.hcl
new file mode 100644
index 0000000..16c8b35
--- /dev/null
+++ b/app/web_static/deploy/web_static.hcl
@@ -0,0 +1,62 @@
+job "web_static" {
+  datacenters = ["dc1"]
+  type = "service"
+
+  constraint {
+    attribute = "${attr.cpu.arch}"
+    value     = "amd64"
+  }
+
+  group "landing" {
+    network {
+      port "deuxfleurs_port" { to = 8080 }
+    }
+
+    task "server" {
+      driver = "docker"
+      config {
+        image = "superboum/amd64_webpull_pug:v4"
+        ports = [ "deuxfleurs_port" ]
+      }
+
+      template {
+        data = <<EOH
+WEBPULL_REPO="https://git.deuxfleurs.fr/Deuxfleurs/site.git"
+WEBPULL_TOKEN="{{ key "secrets/web/home_token" | trimSpace }}"
+EOH
+        destination = "secrets/env"
+        env = true
+      }
+
+      resources {
+        memory = 200
+      }
+
+      service {
+        tags = [
+          "webstatic",
+          "traefik.enable=true",
+          "traefik.frontend.entryPoints=https,http",
+          "traefik.frontend.rule=Host:deuxfleurs.fr,www.deuxfleurs.fr,deuxfleurs.org,www.deuxfleurs.org;PathPrefix:/",
+          # ideally we would have a rewrite regex: ^https?://(www\.deuxfleurs\.fr|deuxfleurs\.org|www\.deuxfleurs\.fr)(.*)$
+          "traefik.frontend.priority=10"
+        ]
+        port = "deuxfleurs_port"
+        address_mode = "host"
+        name = "landing"
+        check {
+          type = "tcp"
+          port = "deuxfleurs_port"
+          interval = "60s"
+          timeout = "5s"
+          check_restart {
+            limit = 3
+            grace = "90s"
+            ignore_warnings = false
+          }
+        }
+      }
+    }
+  }
+}
+