diff options
author | Alex Auvolat <alex@adnab.me> | 2021-12-25 19:40:51 +0100 |
---|---|---|
committer | Alex Auvolat <alex@adnab.me> | 2021-12-25 19:40:51 +0100 |
commit | 60dc1b21a1fdbebae663790e1e07afe704758d61 (patch) | |
tree | 0d96ce82707c6e9caae59deadbdea245f6830e73 /app/garage-staging | |
parent | e77254e97f16dfec41277e46ba3ddc7e2bd3d664 (diff) | |
download | nixcfg-60dc1b21a1fdbebae663790e1e07afe704758d61.tar.gz nixcfg-60dc1b21a1fdbebae663790e1e07afe704758d61.zip |
Add hcl files in here for staging cluster
Diffstat (limited to 'app/garage-staging')
-rw-r--r-- | app/garage-staging/config/garage.toml | 23 | ||||
-rw-r--r-- | app/garage-staging/deploy/garage.hcl | 130 | ||||
-rw-r--r-- | app/garage-staging/secrets/garage-staging/rpc_secret | 1 |
3 files changed, 154 insertions, 0 deletions
diff --git a/app/garage-staging/config/garage.toml b/app/garage-staging/config/garage.toml new file mode 100644 index 0000000..fffcf0c --- /dev/null +++ b/app/garage-staging/config/garage.toml @@ -0,0 +1,23 @@ +block_size = 1048576 + +metadata_dir = "/meta" +data_dir = "/data" + +replication_mode = "3" + +rpc_bind_addr = "0.0.0.0:3991" +rpc_secret = "{{ key "secrets/garage-staging/rpc_secret" | trimSpace }}" + +consul_host = "localhost:8500" +consul_service_name = "garage-staging-rpc-self-advertised" + +bootstrap_peers = [] + +[s3_api] +s3_region = "garage-staging" +api_bind_addr = "0.0.0.0:3990" + +[s3_web] +bind_addr = "0.0.0.0:3992" +root_domain = ".garage-staging-web.home.adnab.me" +index = "index.html" diff --git a/app/garage-staging/deploy/garage.hcl b/app/garage-staging/deploy/garage.hcl new file mode 100644 index 0000000..21faffb --- /dev/null +++ b/app/garage-staging/deploy/garage.hcl @@ -0,0 +1,130 @@ +job "garage-staging" { + type = "system" + datacenters = [ "neptune", "pluton" ] + + priority = 80 + + constraint { + attribute = "${attr.cpu.arch}" + value = "amd64" + } + + group "garage-staging" { + network { + port "s3" { static = 3990 } + port "rpc" { static = 3991 } + port "web" { static = 3992 } + } + + update { + max_parallel = 1 + min_healthy_time = "30s" + healthy_deadline = "5m" + } + + task "server" { + driver = "docker" + + config { + image = "dxflrs/amd64_garage:v0.5-beta1" + command = "/garage" + args = [ "server" ] + network_mode = "host" + volumes = [ + "/mnt/storage/garage-staging/data:/data", + "/mnt/ssd/garage-staging/meta:/meta", + "secrets/garage.toml:/etc/garage.toml", + ] + logging { + type = "journald" + } + } + + template { + data = file("../config/garage.toml") + destination = "secrets/garage.toml" + } + + resources { + memory = 1000 + cpu = 1000 + } + + kill_signal = "SIGINT" + kill_timeout = "20s" + + service { + tags = [ + "garage-staging-api", + "tricot garage-staging.home.adnab.me", + ] + port = 3990 + address_mode = "driver" + name = "garage-staging-api" + check { + type = "tcp" + port = 3990 + address_mode = "driver" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + service { + tags = ["garage-staging-rpc"] + port = 3991 + address_mode = "driver" + name = "garage-staging-rpc" + check { + type = "tcp" + port = 3991 + address_mode = "driver" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + service { + tags = [ + "garage-staging-web", + "tricot *.garage-staging-web.home.adnab.me", + "tricot matrix.home.adnab.me/.well-known/matrix/server", + "tricot rust-docs", + "tricot-add-header Access-Control-Allow-Origin *", + ] + port = 3992 + address_mode = "driver" + name = "garage-staging-web" + check { + type = "tcp" + port = 3992 + address_mode = "driver" + interval = "60s" + timeout = "5s" + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + } + + restart { + interval = "30m" + attempts = 10 + delay = "15s" + mode = "delay" + } + } + } +} diff --git a/app/garage-staging/secrets/garage-staging/rpc_secret b/app/garage-staging/secrets/garage-staging/rpc_secret new file mode 100644 index 0000000..d831d53 --- /dev/null +++ b/app/garage-staging/secrets/garage-staging/rpc_secret @@ -0,0 +1 @@ +CMD_ONCE openssl rand -hex 32 |