From c169d75001d95f80a5fa2b9f3a713a1320454560 Mon Sep 17 00:00:00 2001
From: wizzdom <wizzdom@redbrick.dcu.ie>
Date: Sun, 15 Dec 2024 18:12:06 +0000
Subject: [PATCH] traefik: add ssh, voice, tracing, access log (#83)

mumble voice configs taken from here: https://github.com/DistroByte/nomad/blob/master/jobs/traefik.hcl

Co-authored-by: DistroByte <james@distrobyte.io>
---
 jobs/ingress/traefik.hcl | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/jobs/ingress/traefik.hcl b/jobs/ingress/traefik.hcl
index 0dd2c11..c8f34f7 100644
--- a/jobs/ingress/traefik.hcl
+++ b/jobs/ingress/traefik.hcl
@@ -14,6 +14,9 @@ job "traefik" {
       port "admin" {
         static = 8080
       }
+      port "ssh" {
+        static = 22
+      }
       port "smtp" {
         static = 25
       }
@@ -38,6 +41,12 @@ job "traefik" {
       port "managesieve" {
         static = 4190
       }
+      port "voice-tcp" {
+        static = 4502
+      }
+      port "voice-udp" {
+        static = 4503
+      }
     }
 
     service {
@@ -55,6 +64,7 @@ job "traefik" {
         volumes = [
           "local/traefik.toml:/etc/traefik/traefik.toml",
           "/storage/nomad/traefik/acme/acme.json:/acme.json",
+          "/storage/nomad/traefik/access.log:/access.log",
         ]
       }
 
@@ -73,6 +83,9 @@ job "traefik" {
   [entryPoints.traefik]
   address = ":8080"
 
+  [entryPoints.ssh]
+  address = ":22"
+
   [entryPoints.smtp]
   address = ":25"
 
@@ -97,6 +110,14 @@ job "traefik" {
   [entryPoints.managesieve]
   address = ":4190"
 
+  [entryPoints.voice-tcp]
+  address = ":4502"
+
+  [entryPoints.voice-udp]
+    address = ":4503/udp"
+    [entryPoints.voice-udp.udp]
+      timeout = "15s" # this will help reduce random dropouts in audio https://github.com/mumble-voip/mumble/issues/3550#issuecomment-441495977
+
 [tls.options]
   [tls.options.default]
     minVersion = "VersionTLS12"
@@ -131,6 +152,11 @@ job "traefik" {
   email = "elected-admins@redbrick.dcu.ie"
   storage = "acme.json"
   [certificatesResolvers.lets-encrypt.acme.tlsChallenge]
+
+[tracing]
+
+[accessLog]
+  filePath = "/access.log"
 EOF
         destination = "/local/traefik.toml"
       }