homelab/nomad-job/pihole.nomad

job "pihole" {
  datacenters = ["homelab"]
  priority    = 100
  meta {
    force = 1
  }
  type = "service"
  constraint {
    attribute = "${attr.unique.hostname}"
    value     = "oscar"
  }
  group "pi-hole" {
    network {
      mode = "host"
      port "dns" {
        static = 53
      }
      port "http" {
        static = 8090
        to     = 80
      }
    }
    service {
      name = "pihole-gui"
      tags = ["pihole", "admin",
        "homer.enable=true",
        "homer.name=Pi-hole",
        "homer.service=Application",
        "homer.type=PiHole",
        "homer.logo=http://${NOMAD_ADDR_http}/admin/img/logo.svg",
        "homer.target=_blank",
        "homer.url=http://${NOMAD_ADDR_http}/admin",

      ]
      port = "http"
    }
    task "server" {
      driver = "docker"
      config {
        image = "pihole/pihole:latest"
        ports = [
          "dns",
          "http",
        ]
        volumes = [
          "local/dnsmasq.d/02-localresolver.conf:/etc/dnsmasq.d/02-localresolver.conf",
          "/mnt/diskstation/nomad/pihole:/etc/pihole"
        ]

      }
      vault {
        policies = ["pihole"]

      }
      env {
        TZ   = "Europe/Paris"
        DNS1 = "1.1.1.1"
        DNS2 = "80.67.169.40"

      }
      template {
        data        = <<EOH
        WEBPASSWORD="{{with secret "secrets/data/nomad/pihole"}}{{.Data.data.WEBPASSWORD}}{{end}}"
        EOH
        destination = "local/file.env"
        change_mode = "noop"
        env         = true
      }
      template {
        data        = <<EOH
server=/ducamps.win/192.168.1.10
{{range service "consul"}}server=/consul/{{.Address}}#8600
{{end}}
domain=ducamps.win
no-negcache
local-ttl=2
        EOH
        destination = "local/dnsmasq.d/02-localresolver.conf"
        change_mode = "restart"

      }
      resources {
        memory = 200
      }
    }
  }
}