Merge 97fd226d80 into b58c812a3e

jobs/services/mixpost.hcl

@@ -0,0 +1,154 @@
+job "mixpost" {
+  datacenters = ["aperture"]
+  type        = "service"
+
+  meta {
+    domain = "mixpost.redbrick.dcu.ie"
+  }
+
+  group "mixpost" {
+    network {
+      port "http" {
+        to = 80
+      }
+
+      port "redis" {
+        to = 6379
+      }
+
+      port "db" {
+        to = 3306
+      }
+    }
+
+    service {
+      name = "mixpost"
+      port = "http"
+
+      tags = [
+        "traefik.enable=true",
+        "traefik.port=${NOMAD_PORT_http}",
+        "traefik.http.routers.mixpost.rule=Host(`${NOMAD_META_domain}`)",
+        "traefik.http.routers.mixpost.entrypoints=web,websecure",
+        "traefik.http.routers.mixpost.tls.certresolver=lets-encrypt",
+        "traefik.http.routers.mixpost.tls.certresolver=mytlschallenge",
+        "traefik.http.middlewares.mixpost.headers.SSLRedirect=true",
+        "traefik.http.middlewares.mixpost.headers.STSSeconds=315360000",
+        "traefik.http.middlewares.mixpost.headers.browserXSSFilter=true",
+        "traefik.http.middlewares.mixpost.headers.contentTypeNosniff=true",
+        "traefik.http.middlewares.mixpost.headers.forceSTSHeader=true",
+        "traefik.http.middlewares.mixpost.headers.SSLHost=`${APP_DOMAIN}`",
+        "traefik.http.middlewares.mixpost.headers.STSIncludeSubdomains=true",
+        "traefik.http.middlewares.mixpost.headers.STSPreload=true"
+      ]
+    }
+
+
+    task "mixpost" {
+      driver = "docker"
+
+      config {
+        image = "inovector/mixpost:latest"
+      ports = ["http"]
+      }
+
+      template {
+        data        = <<EOH
+APP_NAME=MIXPOST
+
+APP_KEY={{ key "mixpost/APP_KEY" }}
+APP_DEBUG=true
+APP_DOMAIN=${NOMAD_META_domain}
+APP_URL=https://${APP_DOMAIN}
+
+DB_HOST={{ env "NOMAD_IP_db" }}
+DB_PORT={{ env "NOMAD_HOST_PORT_db" }}
+DB_DATABASE={{ key "mixpost/db/name" }}
+DB_USERNAME={{ key "mixpost/db/user" }}
+DB_PASSWORD={{ key "mixpost/db/password" }}
+
+REDIS_HOST={{ env "NOMAD_IP_redis" }}
+REDIS_PORT={{ env "NOMAD_HOST_PORT_redis" }}
+
+# MAIL_HOST=
+# MAIL_PORT=
+# MAIL_USERNAME=
+# MAIL_PASSWORD=
+# MAIL_ENCRYPTION=tls
+# MAIL_FROM_ADDRESS=no-reply@redbrick.dcu.ie
+# MAIL_FROM_NAME=${APP_NAME}
+# SSL_EMAIL
+
+# POSSIBLE INTEGRATION WITH MINIO MORE RESEARCH NECESSARY
+# MIXPOST_DISK=s3
+
+
+EOH
+        destination = "local/.env"
+        env         = true
+      }
+    }
+
+    task "mixpost-redis" {
+      driver = "docker"
+
+      config {
+        image = "redis:latest"
+        ports = ["redis"]
+      }
+
+      lifecycle {
+        hook    = "prestart"
+        sidecar = "true"
+      }
+    }
+
+    task "mariadb" {
+      driver = "docker"
+
+      template {
+        data = <<EOH
+MYSQL_DATABASE={{ key "mixpost/db/name" }}
+MYSQL_USER={{ key "mixpost/db/user" }}
+MYSQL_PASSWORD={{ key "mixpost/db/password" }}
+MYSQL_RANDOM_ROOT_PASSWORD=yes
+EOH
+
+        destination = "local/file.env"
+        env         = true
+      }
+
+      config {
+        image = "mariadb:latest"
+        ports = ["db"]
+
+        volumes = [
+          "/storage/nomad/mixpost/mysql:/var/lib/mysql",
+          "local/server.cnf:/etc/mysql/mariadb.conf.d/50-server.cnf",
+        ]
+      }
+
+      template {
+        data        = <<EOH
+[mariadbd]
+
+pid-file                = /run/mysqld/mysqld.pid
+basedir                 = /usr
+
+bind-address            = 0.0.0.0
+
+expire_logs_days        = 10
+
+character-set-server     = utf8mb4
+character-set-collations = utf8mb4=uca1400_ai_ci
+        EOH
+        destination = "local/server.cnf"
+      }
+
+      resources {
+        cpu    = 400
+        memory = 800
+      }
+    }
+  }
+}