Merge branch 'master' of git.deuxfleurs.fr:Deuxfleurs/deuxfleurs.fr

2 files changed, 166 insertions, 0 deletions

diff --git a/nomad/garage.hcl b/nomad/garage.hcl
new file mode 100644
index 0000000..923d393
--- /dev/null
+++ b/nomad/garage.hcl
@@ -0,0 +1,99 @@
+job "garage" {
+  datacenters = ["dc1", "belair", "saturne"]
+  type = "system"
+
+  constraint {
+    attribute = "${attr.cpu.arch}"
+    value     = "amd64"
+  }
+
+  group "garage" {
+    task "server" {
+      driver = "docker"
+      config {
+        image = "lxpz/garage_amd64:3"
+        port_map {
+          rpc_port = 3901
+          api_port = 3900
+        }
+        volumes = [
+            "/mnt/storage/garage/data:/garage/data",
+            "/mnt/ssd/garage/meta:/garage/meta",
+			"secrets/garage.toml:/garage/config.toml",
+			"secrets/garage-ca.crt:/garage/garage-ca.crt",
+			"secrets/garage.crt:/garage/garage.crt",
+			"secrets/garage.key:/garage/garage.key",
+        ]
+      }
+
+	  template {
+	 	data = "{{ key \"configuration/garage/garage.toml\" }}" 
+		destination = "secrets/garage.toml"
+	  }
+	  template {
+	 	data = "{{ key \"secrets/garage/garage-ca.crt\" }}" 
+		destination = "secrets/garage-ca.crt"
+	  }
+	  template {
+	 	data = "{{ key \"secrets/garage/garage.crt\" }}" 
+		destination = "secrets/garage.crt"
+	  }
+	  template {
+	 	data = "{{ key \"secrets/garage/garage.key\" }}" 
+		destination = "secrets/garage.key"
+	  }
+
+      resources {
+        memory = 500
+        cpu = 2000
+        network {
+          port "rpc_port" {
+		  	static = "3901"
+		  }
+          port "api_port" {}
+        }
+      }
+
+      service {
+        tags = [
+          "garage_api",
+          "traefik.enable=true",
+          "traefik.frontend.entryPoints=https,http",
+          "traefik.frontend.rule=Host:garage.deuxfleurs.fr"
+        ]
+        port = "api_port"
+        address_mode = "host"
+        name = "garage-api"
+        check {
+          type = "tcp"
+          port = "api_port"
+          interval = "60s"
+          timeout = "5s"
+          check_restart {
+            limit = 3
+            grace = "90s"
+            ignore_warnings = false
+          }
+        }
+      }
+
+	  service {
+	    tags = ["garage-rpc"]
+		port = "rpc_port"
+		address_mode = "host"
+		name = "garage-rpc"
+        check {
+          type = "tcp"
+          port = "rpc_port"
+          interval = "60s"
+          timeout = "5s"
+          check_restart {
+            limit = 3
+            grace = "90s"
+            ignore_warnings = false
+          }
+        }
+	  }
+    }
+  }
+}
diff --git a/nomad/nextcloud.hcl b/nomad/nextcloud.hcl
new file mode 100644
index 0000000..2cc4f5f
--- /dev/null
+++ b/nomad/nextcloud.hcl
@@ -0,0 +1,67 @@
+job "nextcloud" {
+  datacenters = ["dc1", "belair"]
+  type = "service"
+
+  constraint {
+    attribute = "${attr.cpu.arch}"
+    value     = "amd64"
+  }
+
+  group "nextcloud" {
+    count = 1
+    task "nextcloud" {
+      driver = "docker"
+      config {
+        image = "lxpz/deuxfleurs_nextcloud_amd64:8"
+        port_map {
+          web_port = 80
+        }
+        volumes = [
+          "secrets/config.php:/var/www/html/config/config.php"
+        ]
+      }
+
+      artifact {
+        source = "http://127.0.0.1:8500/v1/kv/configuration/nextcloud/config.php.tpl?raw"
+        destination = "secrets/config.php.tpl"
+        mode = "file"
+      }
+      template {
+        source = "secrets/config.php.tpl"
+        destination = "secrets/config.php"
+      }
+
+      resources {
+        memory = 1000
+        cpu = 2000
+        network {
+          port "web_port" {}
+        }
+      }
+
+      service {
+        name = "nextcloud"
+        tags = [
+          "nextcloud",
+          "traefik.enable=true",
+          "traefik.frontend.entryPoints=https,http",
+          "traefik.frontend.rule=Host:nextcloud.deuxfleurs.fr",
+        ]
+        port = "web_port"
+        address_mode = "host"
+        check {
+          type = "tcp"
+          port = "web_port"
+          interval = "60s"
+          timeout = "5s"
+          check_restart {
+            limit = 3
+            grace = "90s"
+            ignore_warnings = false
+          }
+        }
+      }
+    }
+  }
+}
+