154 lines
3.4 KiB
HCL
154 lines
3.4 KiB
HCL
job "mixpost" {
|
|
datacenters = ["aperture"]
|
|
type = "service"
|
|
|
|
meta {
|
|
domain = "mixpost.redbrick.dcu.ie"
|
|
}
|
|
|
|
group "mixpost" {
|
|
network {
|
|
port "http" {
|
|
to = 80
|
|
}
|
|
|
|
port "redis" {
|
|
to = 6379
|
|
}
|
|
|
|
port "db" {
|
|
to = 3306
|
|
}
|
|
}
|
|
|
|
service {
|
|
name = "mixpost"
|
|
port = "http"
|
|
|
|
tags = [
|
|
"traefik.enable=true",
|
|
"traefik.port=${NOMAD_PORT_http}",
|
|
"traefik.http.routers.mixpost.rule=Host(`${NOMAD_META_domain}`)",
|
|
"traefik.http.routers.mixpost.entrypoints=web,websecure",
|
|
"traefik.http.routers.mixpost.tls.certresolver=lets-encrypt",
|
|
"traefik.http.routers.mixpost.tls.certresolver=mytlschallenge",
|
|
"traefik.http.middlewares.mixpost.headers.SSLRedirect=true",
|
|
"traefik.http.middlewares.mixpost.headers.STSSeconds=315360000",
|
|
"traefik.http.middlewares.mixpost.headers.browserXSSFilter=true",
|
|
"traefik.http.middlewares.mixpost.headers.contentTypeNosniff=true",
|
|
"traefik.http.middlewares.mixpost.headers.forceSTSHeader=true",
|
|
"traefik.http.middlewares.mixpost.headers.SSLHost=`${APP_DOMAIN}`",
|
|
"traefik.http.middlewares.mixpost.headers.STSIncludeSubdomains=true",
|
|
"traefik.http.middlewares.mixpost.headers.STSPreload=true"
|
|
]
|
|
}
|
|
|
|
|
|
task "mixpost" {
|
|
driver = "docker"
|
|
|
|
config {
|
|
image = "inovector/mixpost:latest"
|
|
ports = ["http"]
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
APP_NAME=MIXPOST
|
|
|
|
APP_KEY={{ key "mixpost/APP_KEY" }}
|
|
APP_DEBUG=true
|
|
APP_DOMAIN=${NOMAD_META_domain}
|
|
APP_URL=https://${APP_DOMAIN}
|
|
|
|
DB_HOST={{ env "NOMAD_IP_db" }}
|
|
DB_PORT={{ env "NOMAD_HOST_PORT_db" }}
|
|
DB_DATABASE={{ key "mixpost/db/name" }}
|
|
DB_USERNAME={{ key "mixpost/db/user" }}
|
|
DB_PASSWORD={{ key "mixpost/db/password" }}
|
|
|
|
REDIS_HOST={{ env "NOMAD_IP_redis" }}
|
|
REDIS_PORT={{ env "NOMAD_HOST_PORT_redis" }}
|
|
|
|
# MAIL_HOST=
|
|
# MAIL_PORT=
|
|
# MAIL_USERNAME=
|
|
# MAIL_PASSWORD=
|
|
# MAIL_ENCRYPTION=tls
|
|
# MAIL_FROM_ADDRESS=no-reply@redbrick.dcu.ie
|
|
# MAIL_FROM_NAME=${APP_NAME}
|
|
# SSL_EMAIL
|
|
|
|
# POSSIBLE INTEGRATION WITH MINIO MORE RESEARCH NECESSARY
|
|
# MIXPOST_DISK=s3
|
|
|
|
|
|
EOH
|
|
destination = "local/.env"
|
|
env = true
|
|
}
|
|
}
|
|
|
|
task "mixpost-redis" {
|
|
driver = "docker"
|
|
|
|
config {
|
|
image = "redis:latest"
|
|
ports = ["redis"]
|
|
}
|
|
|
|
lifecycle {
|
|
hook = "prestart"
|
|
sidecar = "true"
|
|
}
|
|
}
|
|
|
|
task "mariadb" {
|
|
driver = "docker"
|
|
|
|
template {
|
|
data = <<EOH
|
|
MYSQL_DATABASE={{ key "mixpost/db/name" }}
|
|
MYSQL_USER={{ key "mixpost/db/user" }}
|
|
MYSQL_PASSWORD={{ key "mixpost/db/password" }}
|
|
MYSQL_RANDOM_ROOT_PASSWORD=yes
|
|
EOH
|
|
|
|
destination = "local/file.env"
|
|
env = true
|
|
}
|
|
|
|
config {
|
|
image = "mariadb:latest"
|
|
ports = ["db"]
|
|
|
|
volumes = [
|
|
"/storage/nomad/mixpost/mysql:/var/lib/mysql",
|
|
"local/server.cnf:/etc/mysql/mariadb.conf.d/50-server.cnf",
|
|
]
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
[mariadbd]
|
|
|
|
pid-file = /run/mysqld/mysqld.pid
|
|
basedir = /usr
|
|
|
|
bind-address = 0.0.0.0
|
|
|
|
expire_logs_days = 10
|
|
|
|
character-set-server = utf8mb4
|
|
character-set-collations = utf8mb4=uca1400_ai_ci
|
|
EOH
|
|
destination = "local/server.cnf"
|
|
}
|
|
|
|
resources {
|
|
cpu = 400
|
|
memory = 800
|
|
}
|
|
}
|
|
}
|
|
}
|