From bdf513ebf4371f1aa32bec5cc5859ed34b7a003a Mon Sep 17 00:00:00 2001
From: vincent <vincent@ducamps.win>
Date: Thu, 21 Jul 2022 18:43:03 +0200
Subject: [PATCH] add matrix job

---
 ansible/group_vars/database |   6 +
 nomad-job/matrix.nomad      | 233 ++++++++++++++++++++++++++++++++++++
 2 files changed, 239 insertions(+)
 create mode 100644 nomad-job/matrix.nomad

diff --git a/ansible/group_vars/database b/ansible/group_vars/database
index 36c0e98..07e8cfa 100644
--- a/ansible/group_vars/database
+++ b/ansible/group_vars/database
@@ -19,6 +19,8 @@ postgresql_users:
     password: "{{  lookup('hashi_vault', 'secret=secrets/data/ansible/database:vaultwarden')}}"
   - name: drone
     password: "{{  lookup('hashi_vault', 'secret=secrets/data/ansible/database:drone')}}"
+  - name: dendrite
+    password: "{{  lookup('hashi_vault', 'secret=secrets/data/ansible/database:dendrite')}}"
 
 postgresql_databases:
   - name: wikijs
@@ -53,3 +55,7 @@ postgresql_databases:
     lc_collate: fr_FR.UTF-8
     lc_ctype: fr_FR.UTF-8
     owner: drone
+  - name: dendrite
+    lc_collate: fr_FR.UTF-8
+    lc_ctype: fr_FR.UTF-8
+    owner: dendrite
diff --git a/nomad-job/matrix.nomad b/nomad-job/matrix.nomad
new file mode 100644
index 0000000..5480bc6
--- /dev/null
+++ b/nomad-job/matrix.nomad
@@ -0,0 +1,233 @@
+
+job "matrix" {
+  datacenters = ["homelab"]
+  type = "service"
+  meta {
+    forcedeploy = "0"
+  }
+
+  group "matrix"{
+    network {
+      mode = "host"
+      port "http" {
+        to = 8008
+      }
+    }
+    vault{
+      policies= ["access-tables"]
+
+    }
+    task "dendrite" {
+      driver = "docker"
+      service {
+        name = "dendrite"
+        port = "http"
+        tags = [
+            "traefik.enable=true",
+            "traefik.http.routers.${NOMAD_TASK_NAME}.rule=Host(`${NOMAD_TASK_NAME}.ducamps.win`)",
+            "traefik.http.routers.${NOMAD_TASK_NAME}.tls.domains[0].sans=${NOMAD_TASK_NAME}.ducamps.win",
+            "traefik.http.routers.${NOMAD_TASK_NAME}.tls.certresolver=myresolver",
+
+
+        ]
+      }
+      config {
+        image = "matrixdotorg/dendrite-monolith"
+        ports = ["http"]
+        volumes = [
+          "local/dendrite.yaml:/etc/dendrite/dendrite.yaml",
+          "secrets/matrix_key.pem:/etc/dendrite/matrix_key.pem",
+          "/mnt/diskstation/nomad/dendrite/media:/var/dendrite/media"
+        ]
+
+      }
+      env {
+      }
+
+      template {
+        data= <<EOH
+
+version: 2
+
+global:
+  server_name: dendrite.ducamps.win
+
+  private_key: matrix_key.pem
+
+  old_private_keys:
+
+  key_validity_period: 168h0m0s
+
+  database:
+
+  {{ with secret "secrets/data/dendrite"}}
+    connection_string: postgresql://dendrite:{{.Data.data.databasePass}}@db1.ducamps.win/dendrite?sslmode=disable
+  {{end}}
+
+    max_open_conns: 100
+    max_idle_conns: 5
+    conn_max_lifetime: -1
+
+  cache:
+    max_size_estimated: 1gb
+
+    max_age: 1h
+
+  well_known_server_name: ""
+
+  trusted_third_party_id_servers:
+    - matrix.org
+    - vector.im
+
+  disable_federation: false
+
+  presence:
+    enable_inbound: false
+    enable_outbound: false
+
+  report_stats:
+    enabled: false
+    endpoint: https://matrix.org/report-usage-stats/push
+
+  server_notices:
+    enabled: false
+    local_part: "_server"
+    display_name: "Server Alerts"
+    avatar_url: ""
+    room_name: "Server Alerts"
+
+  jetstream:
+    addresses:
+
+    storage_path: ./
+
+    topic_prefix: Dendrite
+
+  metrics:
+    enabled: false
+    basic_auth:
+      username: metrics
+      password: metrics
+
+  dns_cache:
+    enabled: false
+    cache_size: 256
+    cache_lifetime: "5m" # 5 minutes; https://pkg.go.dev/time@master#ParseDuration
+
+app_service_api:
+  disable_tls_validation: false
+
+  config_files:
+
+client_api:
+  registration_disabled: true
+
+  guests_disabled: true
+
+  registration_shared_secret: ""
+
+  enable_registration_captcha: false
+
+  recaptcha_public_key: ""
+  recaptcha_private_key: ""
+  recaptcha_bypass_secret: ""
+  recaptcha_siteverify_api: ""
+
+  turn:
+    turn_user_lifetime: ""
+    turn_uris:
+    turn_shared_secret: ""
+    turn_username: ""
+    turn_password: ""
+
+  rate_limiting:
+    enabled: true
+    threshold: 5
+    cooloff_ms: 500
+    exempt_user_ids:
+
+federation_api:
+  send_max_retries: 16
+
+  disable_tls_validation: false
+
+  key_perspectives:
+    - server_name: matrix.org
+      keys:
+        - key_id: ed25519:auto
+          public_key: Noi6WqcDj0QmPxCNQqgezwTlBKrfqehY1u2FyWP9uYw
+        - key_id: ed25519:a_RXGa
+          public_key: l8Hft5qXKn1vfHrg3p4+W8gELQVo8N13JkluMfmn2sQ
+
+  prefer_direct_fetch: false
+
+media_api:
+  base_path: ./media_store
+
+  max_file_size_bytes: 10485760
+
+  dynamic_thumbnails: false
+
+  max_thumbnail_generators: 10
+
+  thumbnail_sizes:
+    - width: 32
+      height: 32
+      method: crop
+    - width: 96
+      height: 96
+      method: crop
+    - width: 640
+      height: 480
+      method: scale
+
+mscs:
+  mscs:
+
+sync_api:
+
+user_api:
+  bcrypt_cost: 10
+
+
+tracing:
+  enabled: false
+  jaeger:
+    serviceName: ""
+    disabled: false
+    rpc_metrics: false
+    tags: []
+    sampler: null
+    reporter: null
+    headers: null
+    baggage_restrictions: null
+    throttler: null
+
+logging:
+  - type: std
+    level: info
+  - type: file
+    level: info
+    params:
+      path: ./logs
+          EOH
+        destination = "local/dendrite.yaml"
+      }
+template {
+  data= <<EOH
+
+{{ with secret "secrets/data/dendrite"}}
+{{.Data.data.privateKey}}
+{{end}}
+          EOH
+  destination = "secrets/matrix_key.pem"
+      }
+
+
+      resources {
+        memory = 150
+      }
+    }
+
+  }
+}