homelab/nomad-job/crowdsec-agent.nomad

86 lines
1.6 KiB
Plaintext
Raw Normal View History

2022-05-26 12:19:32 +00:00
job "crowdsec-agent" {
2022-10-29 08:40:01 +00:00
datacenters = ["homelab", "hetzner"]
type = "system"
2022-05-26 12:19:32 +00:00
meta {
forcedeploy = "2"
}
2022-10-29 08:40:01 +00:00
vault {
2022-10-30 08:33:39 +00:00
policies = ["crowdsec"]
2022-05-26 12:19:32 +00:00
}
2022-10-29 08:40:01 +00:00
group "crowdsec-agent" {
2022-05-26 16:25:11 +00:00
network {
mode = "host"
2022-10-29 08:40:01 +00:00
port "metric" {
2022-05-26 16:25:11 +00:00
to = 6060
}
}
2022-05-26 12:19:32 +00:00
task "crowdsec-agent" {
2022-05-26 16:25:11 +00:00
service {
2022-10-29 08:40:01 +00:00
name = "crowdsec-metrics"
2022-05-26 16:25:11 +00:00
port = "metric"
tags = [
]
}
2022-05-26 12:19:32 +00:00
driver = "docker"
config {
image = "crowdsecurity/crowdsec"
2022-05-26 16:25:11 +00:00
ports = ["metric"]
2022-05-26 12:19:32 +00:00
volumes = [
"/var/run/docker.sock:/var/run/docker.sock",
"/var/log:/var/log",
"local/acquis.yaml:/etc/crowdsec/acquis.yaml"
]
}
env {
2022-10-29 08:40:01 +00:00
COLLECTIONS = "crowdsecurity/traefik crowdsecurity/home-assistant LePresidente/gitea"
DISABLE_LOCAL_API = "true"
2022-05-26 12:19:32 +00:00
}
template {
2022-10-29 08:40:01 +00:00
data = <<EOH
2022-05-26 12:19:32 +00:00
---
source: docker
container_name_regexp:
- traefik-*
labels:
type: traefik
2022-05-26 16:25:11 +00:00
---
source: docker
container_name_regexp:
- hass-*
labels:
type: homeassistant
---
source: docker
container_name_regexp:
- gitea-*
labels:
2022-08-27 07:34:27 +00:00
type: gitea
2022-05-26 16:25:11 +00:00
2022-05-26 12:19:32 +00:00
EOH
destination = "local/acquis.yaml"
}
template {
2022-10-29 08:40:01 +00:00
data = <<EOH
2022-05-26 12:19:32 +00:00
LOCAL_API_URL = {{- range service "crowdsec-api" }} "http://{{ .Address }}:{{ .Port }}"{{- end }}
AGENT_USERNAME = "{{ env "node.unique.name" }}"
2022-10-30 08:33:39 +00:00
{{with secret "secrets/data/nomad/crowdsec"}}
2022-05-26 12:19:32 +00:00
AGENT_PASSWORD = "{{.Data.data.AGENT_PASSWORD}}"
{{end}}
EOH
2022-10-29 08:40:01 +00:00
destination = "secret/agent.env"
env = "true"
2022-05-26 12:19:32 +00:00
}
resources {
memory = 100
}
}
}
}