Add tricot to replace traefik

app/dummy/deploy/dummy-nginx.hcl

@@ -0,0 +1,41 @@
+job "dummy-nginx" {
+	datacenters = ["neptune"]
+	type = "service"
+	
+	group "nginx" {
+		count = 1
+
+		constraint {
+			attribute = "${attr.unique.hostname}"
+			operator = "="
+			value = "carcajou"
+		}
+
+		network {
+			port "http" {
+				to = 80
+			}
+		}
+
+		task "nginx" {
+			driver = "docker"
+			config {
+				image = "nginx"
+				ports = [ "http" ]
+			}
+		}
+
+		service {
+			port = "http"
+			tags = [
+				"tricot home.adnab.me 100",
+			]
+			check {
+				type = "http"
+				path = "/"
+				interval = "10s"
+				timeout = "2s"
+			}
+		}
+	}
+}

app/garage-staging/deploy/garage.hcl

@@ -98,6 +98,7 @@ job "garage-staging" {
         tags = [
             "garage-staging-web",
             "tricot *.garage-staging-web.home.adnab.me",
+            "tricot rust-docs",
         ]
         port = 3992
         address_mode = "driver"

app/tricot/deploy/tricot.hcl

@@ -0,0 +1,48 @@
+job "tricot" {
+  datacenters = ["dc1", "neptune"]
+  type = "system"
+  priority = 90
+
+  constraint {
+    attribute = "${attr.cpu.arch}"
+    value     = "amd64"
+  }
+
+  update {
+    max_parallel     = 1
+    stagger = "1m"
+  }
+
+  group "tricot" {
+    task "tricot" {
+      driver = "docker"
+
+      config {
+        image = "lxpz/amd64_tricot:4"
+        network_mode = "host"
+        readonly_rootfs = true
+      }
+
+      restart {
+        interval = "30m"
+        attempts = 2
+        delay    = "15s"
+        mode     = "delay"
+      }
+
+      template {
+        data = <<EOH
+TRICOT_NODE_NAME={{ env "attr.unique.hostname" }}
+TRICOT_LETSENCRYPT_EMAIL=alex@adnab.me
+RUST_LOG=tricot=debug
+EOH
+        destination = "secrets/env"
+        env = true
+      }
+
+      resources {
+        memory = 40
+      }
+    }
+  }
+}