add tt-rss job

tt-rss.nomad

@@ -0,0 +1,147 @@
+job "tt-rss" {
+  datacenters = ["homelab"]
+  type = "service"
+
+
+  group "tt-rss" {
+    ephemeral_disk {
+      migrate = true
+      size    =  200
+      sticky  = true
+    }
+    network {
+      mode = "host"
+      port "http"{
+        to = 80
+      }
+      port "appPort" {
+        to = 9000
+      }
+    }
+    vault {
+      policies = ["access-tables"]
+    }
+    service {
+      name = "tt-rss"
+      port = "http"
+      tags = [
+        "traefik.enable=true",
+        "traefik.http.routers.${NOMAD_JOB_NAME}.rule=Host(`rss.ducamps.win`)",
+        "traefik.http.routers.${NOMAD_JOB_NAME}.tls.domains[0].sans=${NOMAD_JOB_NAME}.ducamps.win",
+        "traefik.http.routers.${NOMAD_JOB_NAME}.tls.certresolver=myresolver",
+      ]
+    }
+
+
+    task "app" {
+      driver = "docker"
+      config {
+        image = "cthulhoo/ttrss-fpm-pgsql-static"
+        ports = [
+         "appPort"
+        ]
+        volumes = [
+          "${NOMAD_ALLOC_DIR}/data:/var/www/html"
+        ]
+      }
+      env {
+        TTRSS_DB-TYPE = "pgsql"
+        TTRSS_DB_HOST = "db1.ducamps.win"
+        TTRSS_DB_NAME = "ttrss"
+        TTRSS_DB_USER = "ttrss"
+        TTRSS_SELF_URL_PATH = "https://rss.ducamps.win/tt-rss"
+      }
+      template {
+        data= <<EOH
+            {{ with secret "secrets/data/ttrss"}}
+            TTRSS_DB_PASS = "{{ .Data.data.DB_PASS }}"
+            {{end}}
+          EOH
+        destination = "secrets/tt-rss.env"
+        env = true
+
+      }
+    }
+    task "frontend" {
+      driver = "docker"
+      config {
+        image= "nginx:alpine"
+        ports= [
+          "http"
+        ]
+        volumes = [
+          "etc/nginx/nginx.conf:/etc/nginx/nginx.conf",
+          "${NOMAD_ALLOC_DIR}/data:/var/www/html"
+        ]
+      }
+
+      template {
+        data = <<EOH
+              worker_processes auto;
+              pid /var/run/nginx.pid;
+
+              events {
+                  worker_connections  1024;
+              }
+
+              http {
+              	include /etc/nginx/mime.types;
+              	default_type  application/octet-stream;
+
+              	access_log /dev/stdout;
+              	error_log /dev/stderr warn;
+
+              	sendfile on;
+
+              	index index.php;
+
+              	upstream app {
+              		server {{ env "NOMAD_ADDR_appPort" }};
+              	}
+
+              	server {
+              		listen 80;
+              		listen [::]:80;
+              		root /var/www/html;
+
+              		location /tt-rss/cache {
+              			aio threads;
+              			internal;
+              		}
+
+              		location /tt-rss/backups {
+              			internal;
+              		}
+
+              		location ~ \.php$ {
+              			# regex to split $uri to $fastcgi_script_name and $fastcgi_path
+              			fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+
+              			# Check that the PHP script exists before passing it
+              			try_files $fastcgi_script_name =404;
+
+              			# Bypass the fact that try_files resets $fastcgi_path_info
+              			# see: http://trac.nginx.org/nginx/ticket/321
+              			set $path_info $fastcgi_path_info;
+              			fastcgi_param PATH_INFO $path_info;
+
+              			fastcgi_index index.php;
+              			include fastcgi.conf;
+
+              			fastcgi_pass app;
+              		}
+
+              		location / {
+              			try_files $uri $uri/ =404;
+              		}
+
+              	}
+              }
+          EOH
+        destination = "etc/nginx/nginx.conf"
+      }
+
+    }
+
+  }
+}