app/garage/config/garage.toml

@@ -1,24 +1,18 @@
 block_size = 1048576
 
-metadata_dir = "/garage/meta"
+metadata_dir = "/meta"
-data_dir = "/garage/data"
+data_dir = "/data"
 
 replication_mode = "3"
 
 rpc_bind_addr = "[::]:3901"
+rpc_secret = "{{ key "secrets/garage/rpc_secret" | trimSpace }}"
 
 consul_host = "consul.service.2.cluster.deuxfleurs.fr:8500"
-consul_service_name = "garage-rpc"
+consul_service_name = "garage-rpc-self-advertised"
 
 bootstrap_peers = []
 
-max_concurrent_rpc_requests = 12
-
-[rpc_tls]
-ca_cert = "/garage/garage-ca.crt"
-node_cert = "/garage/garage.crt"
-node_key = "/garage/garage.key"
-
 [s3_api]
 s3_region = "garage"
 api_bind_addr = "[::]:3900"

app/garage/deploy/garage.hcl

@@ -25,15 +25,14 @@ job "garage" {
       driver = "docker"
       config {
         advertise_ipv6_address = true
-        image = "lxpz/garage_amd64:v0.3.0.2"
+        image = "dxflrs/amd64_garage:v0.4-rc1"
+        command = "/garage"
+        args = [ "server" ]
         network_mode = "host"
         volumes = [
-          "/mnt/storage/garage/data:/garage/data",
+          "/mnt/storage/garage/data:/data",
-          "/mnt/ssd/garage/meta:/garage/meta",
+          "/mnt/ssd/garage/meta:/meta",
-          "secrets/garage.toml:/garage/config.toml",
+          "secrets/garage.toml:/etc/garage.toml",
-          "secrets/garage-ca.crt:/garage/garage-ca.crt",
-          "secrets/garage.crt:/garage/garage.crt",
-          "secrets/garage.key:/garage/garage.key",
         ]
         logging {
           type = "journald"
@@ -45,22 +44,8 @@ job "garage" {
         destination = "secrets/garage.toml"
       }
 
-      # --- secrets ---
-      template {
-        data = "{{ key \"secrets/garage/garage-ca.crt\" }}" 
-        destination = "secrets/garage-ca.crt"
-      }
-      template {
-        data = "{{ key \"secrets/garage/garage.crt\" }}" 
-        destination = "secrets/garage.crt"
-      }
-      template {
-        data = "{{ key \"secrets/garage/garage.key\" }}" 
-        destination = "secrets/garage.key"
-      }
-
       resources {
-        memory = 800
+        memory = 1500
         cpu = 1000
       }
 

app/garage/secrets/garage/garage-ca.crt

@@ -1 +0,0 @@
-USER_LONG garage-ca.crt (generated with Garage's genkeys.sh script)

app/garage/secrets/garage/garage-ca.key

@@ -1 +0,0 @@
-USER_LONG garage-ca.key (generated with Garage's genkeys.sh script)

app/garage/secrets/garage/garage.crt

@@ -1 +0,0 @@
-USER_LONG garage.crt (generated with Garage's genkeys.sh script)

app/garage/secrets/garage/garage.key

@@ -1 +0,0 @@
-USER_LONG garage.key (generated with Garage's genkeys.sh script)

app/garage/secrets/garage/rpc_secret

@@ -0,0 +1 @@
+CMD_ONCE openssl rand -hex 32