feat: add constrainst to limit nas job

nomad-job/alertmanager.nomad

@@ -8,6 +8,11 @@ job "alertmanager" {
   vault {
     policies = ["alertmanager"]
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "alertmanager" {
     network {
       mode = "host"

nomad-job/batch-seedboxsync.nomad

@@ -6,7 +6,11 @@ job "batch-seedboxsync" {
   meta {
     forcedeploy = "0"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   constraint {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"

nomad-job/crowdsec-api.nomad

@@ -5,9 +5,15 @@ job "crowdsec-api" {
   meta {
     forcedeploy = "-1"
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   vault {
     policies = ["crowdsec"]
   }
+
   group "crowdsec-api" {
     network {
       mode = "host"

nomad-job/dashboard.nomad

@@ -6,7 +6,11 @@ job "dashboard" {
   meta {
     forcedeploy = "1"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "dashboard" {
     network {
       mode = "host"

nomad-job/dockermailserver.nomad

@@ -9,7 +9,11 @@ job "dockermailserver" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "dockermailserver" {
     network {
       mode = "host"

nomad-job/filestash.nomad

@@ -10,7 +10,11 @@ job "filestash" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
 
   group "filestash" {
     network {

nomad-job/gitea.nomad

@@ -8,6 +8,11 @@ job "git" {
   constraint {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
+  } 
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
   }
   group "gitea" {
     network {

nomad-job/grafana.nomad

@@ -2,6 +2,11 @@ job "grafana" {
   datacenters = ["homelab"]
   priority    = 50
   type        = "service"
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   meta {
     forcedeploiement = 2
   }

nomad-job/homeassistant.nomad

@@ -3,6 +3,11 @@ job "homeassistant" {
   datacenters = ["homelab"]
   priority    = 90
   type        = "service"
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   meta {
     forcedeploy = "0"
   }

nomad-job/jellyfin.nomad

@@ -2,6 +2,7 @@ job "jellyfin" {
   datacenters = ["homelab"]
   priority    = 30
   type        = "service"
+
   meta {
     forcedeploy = "1"
   }
@@ -9,6 +10,11 @@ job "jellyfin" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group jellyfin-vue {
     network {
       mode = "host"

nomad-job/loki.nomad

@@ -6,7 +6,11 @@ job "loki" {
   meta {
     forcedeploy = "0"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "loki" {
     network {
       mode = "host"

nomad-job/pacoloco.nomad

@@ -6,7 +6,11 @@ job "pacoloco" {
   meta {
     forcedeploy = "0"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "pacoloco" {
     network {
       mode = "host"

nomad-job/paperless-ng.nomad

@@ -6,7 +6,11 @@ job "paperless-ng" {
   meta {
     forcedeploy = "0"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   constraint {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"

nomad-job/pdns-auth.nomad

@@ -10,6 +10,11 @@ job "pdns-auth" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "pdns-auth" {
     network {
       port "dns" {

nomad-job/pihole.nomad

@@ -9,6 +9,11 @@ job "pihole" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "pi-hole" {
     network {
       port "dns" {

nomad-job/prometheus.nomad

@@ -9,7 +9,11 @@ job "prometheus" {
   meta{
     force_deploy= 1
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "prometheus" {
     count = 1
 

nomad-job/radicale.nomad

@@ -6,6 +6,11 @@ job "radicale" {
   meta {
     forcedeploy = "0"
   }
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "radicale" {
     network {
       mode = "host"

nomad-job/supysonic.nomad

@@ -10,7 +10,11 @@ job "supysonic" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "supysonic" {
     network {
       mode = "host"

nomad-job/syncthing.nomad

@@ -10,7 +10,11 @@ job "syncthing" {
     attribute = "${attr.cpu.arch}"
     value     = "amd64"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
 
   group "syncthing" {
     network {

nomad-job/traefik-local.nomad

@@ -2,7 +2,11 @@ job "traefik-local" {
   datacenters = ["homelab"]
   priority    = 90
   type        = "service"
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "traefik-local" {
     network {
       mode = "host"

nomad-job/vaultwarden.nomad

@@ -6,7 +6,11 @@ job "vaultwarden" {
   meta {
     forcedeploy = "0"
   }
-
+  constraint {
+    attribute = "${node.class}"
+    operator = "set_contains"
+    value = "cluster"
+  }
   group "vaultwarden" {
     network {
       mode = "host"