homelab/nomad-job/pdns-auth.nomad

179 lines
3.9 KiB
Plaintext
Raw Normal View History

2023-11-04 20:33:51 +00:00
job "pdns-auth" {
datacenters = ["homelab"]
priority = 100
meta {
2023-11-05 16:00:16 +00:00
force = 2
2023-11-04 20:33:51 +00:00
}
type = "service"
constraint {
attribute = "${attr.cpu.arch}"
value = "amd64"
}
group "pdns-auth" {
network {
port "dns" {
static=5300
}
port "http" {
static = 8081
}
port "pdnsadmin"{
to = 80
}
}
vault {
policies = ["pdns"]
}
task "pdns-auth" {
driver = "docker"
service {
name = "pdns-auth"
port = "dns"
}
config {
2023-11-05 16:00:16 +00:00
image = "powerdns/pdns-auth-master:latest"
2023-11-04 20:33:51 +00:00
network_mode = "host"
2023-11-05 13:58:10 +00:00
privileged=true
2023-11-05 16:00:16 +00:00
cap_add= ["net_bind_service"]
2023-11-04 20:33:51 +00:00
volumes = [
"/mnt/diskstation/nomad/pdns-auth/var:/var/lib/powerdns/",
"local/dnsupdate.conf:/etc/powerdns/pdns.d/dnsupdate.conf",
"local/pdns.conf:/etc/powerdns/pdns.conf"
]
}
template {
destination = "secrets/env"
data = <<EOH
{{ with secret "secrets/data/nomad/pdns"}}
PDNS_AUTH_API_KEY="{{.Data.data.API_KEY}}"
{{ end }}
EOH
env = true
}
template{
destination = "local/dnsupdate.conf"
data = <<EOH
dnsupdate=yes
allow-dnsupdate-from=192.168.1.41/24
2023-11-05 16:00:16 +00:00
local-address=192.168.1.5
local-port=53
2023-11-04 20:33:51 +00:00
EOH
}
template{
destination = "local/pdns.conf"
data = <<EOH
launch=gpgsql
gpgsql-host=active.db.service.consul
gpgsql-port=5432
gpgsql-user=pdns-auth
{{ with secret "secrets/data/database/pdns"}}
gpgsql-password={{ .Data.data.pdnsauth }}
{{ end }}
include-dir=/etc/powerdns/pdns.d
EOH
}
resources {
memory = 100
}
}
task "pnds-admin" {
service {
name = "pdns-admin"
tags = [
"homer.enable=true",
"homer.name=PDNS-ADMIN",
"homer.service=Application",
"homer.target=_blank",
"homer.url=http://${NOMAD_ADDR_pdnsadmin}",
]
port = "pdnsadmin"
}
driver = "docker"
config {
image = "powerdnsadmin/pda-legacy:latest"
ports= ["pdnsadmin"]
volumes = [
"/mnt/diskstation/nomad/pdns-admin/:/data/node_module/",
]
}
template{
destination = "secrets/pdns-admin.env"
env = true
data = <<EOH
{{ with secret "secrets/data/nomad/pdns"}}
SECRET_KEY="{{ .Data.data.SECRET_KEY }}"
GUNICORN_WORKERS=2
{{ end }}
{{ with secret "secrets/data/database/pdns"}}
SQLALCHEMY_DATABASE_URI=postgresql://pdns-admin:{{ .Data.data.pdnsadmin }}@active.db.service.consul/pdns-admin
{{end}}
EOH
}
}
2023-11-06 18:07:04 +00:00
task "pdns-recursor" {
driver = "docker"
config {
image = "powerdns/pdns-recursor-master:latest"
network_mode = "host"
volumes = [
"local/recursor.conf:/etc/powerdns/recursor.conf",
]
}
template{
destination = "local/recursor.conf"
data= <<EOH
config-dir=/etc/powerdns
dnssec=off
forward-zones=consul=127.0.0.1:8600,ducamps.eu=192.168.1.5,1.168.192.in-addr.arpa=192.168.1.5
local-address=192.168.1.6
EOH
}
resources {
cpu = 100
memory = 100
}
}
2023-11-04 20:33:51 +00:00
task "keepalived" {
driver = "docker"
lifecycle {
2023-11-05 13:58:10 +00:00
hook = "prestart"
2023-11-04 20:33:51 +00:00
sidecar = true
}
env {
KEEPALIVED_ROUTER_ID = "52"
KEEPALIVED_STATE = "MASTER"
2023-11-06 18:07:04 +00:00
KEEPALIVED_VIRTUAL_IPS = "#PYTHON2BASH:['192.168.1.5','192.168.1.6']"
2023-11-04 20:33:51 +00:00
}
template{
destination = "local/env.yaml"
change_mode = "restart"
env= true
data = <<EOH
KEEPALIVED_INTERFACE= {{ sockaddr "GetPrivateInterfaces | include \"network\" \"192.168.1.0/24\" | attr \"name\"" }}
EOH
}
config {
image = "osixia/keepalived:2.0.20"
network_mode = "host"
cap_add = [
"NET_ADMIN",
"NET_BROADCAST",
"NET_RAW"
]
}
resources {
cpu = 20
memory = 20
}
}
}
}