homelab/nomad-job/traefik-ingress.nomad
vincent e0f9190b76
Some checks failed
continuous-integration/drone/push Build is failing
feat: docker pull througt mirror
2024-03-17 18:58:24 +01:00

155 lines
3.6 KiB
HCL

job "traefik-ingress" {
datacenters = ["hetzner"]
priority = 90
type = "service"
meta {
force_deploy = 1
}
group "traefik-ingress" {
network {
mode = "host"
port "http" {
static = 80
host_network = "public"
}
port "https" {
static = 443
host_network = "public"
}
port "admin" {
static = 9080
host_network = "private"
}
port "ssh" {
static = 2222
host_network = "public"
}
port "smtp" {
static = 25
host_network = "public"
}
port "esmtp" {
static = 465
host_network = "public"
}
port "imap" {
static= 993
host_network = "public"
}
}
vault {
policies = ["traefik"]
}
task "traefik" {
driver = "docker"
service {
name = "traefik"
tags = ["traefik"]
port = "https"
}
service {
name = "traefik-admin"
port = "admin"
tags = [
"homer.enable=true",
"homer.name=Traefik admin",
"homer.subtitle=WAN",
"homer.service=Platform",
"homer.logo=https://upload.wikimedia.org/wikipedia/commons/1/1b/Traefik.logo.png",
"homer.target=_blank",
"homer.url=http://${NOMAD_ADDR_admin}",
]
}
config {
image = "docker.service.consul:5000/library/traefik"
ports = [
"http",
"https",
"admin",
"ssh",
"smtp",
"esmtp",
"imap",
]
volumes = [
"local/traefik.toml:/etc/traefik/traefik.toml",
"/mnt/diskstation/nomad/traefik/acme.json:/acme.json"
]
}
# vault{
#}
env {
}
template {
data = <<EOH
HETZNER_API_KEY = "{{with secret "secrets/data/nomad/traefik"}}{{.Data.data.hetznerdnstoken}}{{end}}"
EOH
destination = "secrets/gandi.env"
env = true
}
template {
data = <<EOH
[entryPoints]
[entrypoints.ssh]
address = ":2222"
[entryPoints.web]
address = ":80"
[entryPoints.web.http]
[entryPoints.web.http.redirections]
[entryPoints.web.http.redirections.entryPoint]
to = "websecure"
scheme = "https"
[entryPoints.websecure]
address = ":443"
[entryPoints.traefik]
address = ":9080"
[entrypoints.smtp]
address = ":25"
[entrypoints.esmtp]
address = ":465"
[entrypoints.imap]
address = ":993"
[http.middlewares]
[http.middlewares.https-redirect.redirectscheme]
scheme = "https"
[providers.consulCatalog]
exposedByDefault = false
[providers.consulCatalog.endpoint]
address = "{{{env "NOMAD_IP_admin"}}}:8500"
[log]
[accessLog]
[api]
dashboard = true
insecure = true
[ping]
[certificatesResolvers.myresolver.acme]
email = "vincent@ducamps.eu"
storage = "acme.json"
[certificatesResolvers.myresolver.acme.httpChallenge]
entryPoint= "web"
[metrics]
[metrics.prometheus]
EOH
destination = "local/traefik.toml"
env = false
change_mode = "noop"
left_delimiter = "{{{"
right_delimiter = "}}}"
}
resources {
memory = 200
}
}
}
}