90 lines
2.5 KiB
HCL
90 lines
2.5 KiB
HCL
|
|
job "vikunja" {
|
|
datacenters = ["homelab"]
|
|
priority = 70
|
|
type = "service"
|
|
meta {
|
|
forcedeploy = "0"
|
|
}
|
|
|
|
group "vikunja" {
|
|
network {
|
|
mode = "host"
|
|
port "front" {
|
|
to = 80
|
|
}
|
|
port "api" {
|
|
to = 3456
|
|
}
|
|
}
|
|
vault {
|
|
policies = ["vikunja"]
|
|
|
|
}
|
|
task "api" {
|
|
driver = "docker"
|
|
service {
|
|
name = "vikunja-api"
|
|
port = "api"
|
|
tags = [
|
|
"traefik.enable=true",
|
|
"traefik.http.routers.${NOMAD_JOB_NAME}-${NOMAD_TASK_NAME}.rule=Host(`${NOMAD_JOB_NAME}.ducamps.eu`)",
|
|
"traefik.http.routers.${NOMAD_JOB_NAME}-${NOMAD_TASK_NAME}.tls.domains[0].sans=${NOMAD_JOB_NAME}.ducamps.eu",
|
|
"traefik.http.routers.${NOMAD_JOB_NAME}-${NOMAD_TASK_NAME}.tls.certresolver=myresolver",
|
|
"traefik.http.routers.${NOMAD_JOB_NAME}-${NOMAD_TASK_NAME}.entrypoints=web,websecure",
|
|
"homer.enable=true",
|
|
"homer.name=vikunka",
|
|
"homer.service=Application",
|
|
"homer.logo=https://${NOMAD_JOB_NAME}.ducamps.eu/images/icons/apple-touch-icon-180x180.png",
|
|
"homer.target=_blank",
|
|
"homer.url=https://${NOMAD_JOB_NAME}.ducamps.eu",
|
|
]
|
|
}
|
|
config {
|
|
image = "docker.service.consul:5000/vikunja/vikunja"
|
|
ports = ["api", "front"]
|
|
volumes = ["local/config.yml:/etc/vikunja/config.yml"]
|
|
}
|
|
env {
|
|
VIKUNJA_DATABASE_HOST = "active.db.service.consul"
|
|
VIKUNJA_DATABASE_TYPE = "postgres"
|
|
VIKUNJA_DATABASE_USER = "vikunja"
|
|
VIKUNJA_DATABASE_DATABASE = "vikunja"
|
|
VIKUNJA_SERVICE_JWTSECRET = uuidv4()
|
|
VIKUNJA_SERVICE_FRONTENDURL = "https://${NOMAD_JOB_NAME}.ducamps.eu/"
|
|
VIKUNJA_AUTH_LOCAL = False
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
{{ with secret "secrets/data/database/vikunja"}}
|
|
VIKUNJA_DATABASE_PASSWORD= "{{ .Data.data.password }}"
|
|
{{end}}
|
|
EOH
|
|
destination = "secrets/sample.env"
|
|
env = true
|
|
}
|
|
template {
|
|
data = <<EOH
|
|
auth:
|
|
openid:
|
|
enabled: true
|
|
redirecturl: https://vikunja.ducamps.eu/auth/openid/
|
|
providers:
|
|
- name: Authelia
|
|
authurl: https://auth.ducamps.eu
|
|
clientid: vikunja
|
|
clientsecret: {{ with secret "secrets/data/authelia/vikunja"}} {{ .Data.data.password }} {{end}}
|
|
scope: openid profile email
|
|
EOH
|
|
destination = "local/config.yml"
|
|
}
|
|
resources {
|
|
memory = 100
|
|
}
|
|
}
|
|
|
|
|
|
}
|
|
}
|