Staging: run diplonat as nix job

cluster/staging/app/core/deploy/core.hcl

@@ -15,16 +15,16 @@ job "core" {
 
   group "network" {
     task "diplonat" {
-      driver = "docker"
+      driver = "nix2"
 
       config {
-        image = "lxpz/amd64_diplonat:3"
-        network_mode = "host"
-        readonly_rootfs = true
-        volumes = [
-          "secrets:/etc/diplonat",
+        packages = [
+          "#iptables",
+          "git+https://git.deuxfleurs.fr/Deuxfleurs/diplonat.git?ref=main&rev=f306e8dc8d0e93478353ce39b6064e8c06a8bca6"
         ]
+        command = "diplonat"
       }
+      user = "root"
 
       restart {
         interval = "30m"
@@ -35,17 +35,17 @@ job "core" {
 
       template {
         data = "{{ key \"secrets/consul/consul-ca.crt\" }}"
-        destination = "secrets/consul-ca.crt"
+        destination = "etc/diplonat/consul-ca.crt"
       }
 
       template {
         data = "{{ key \"secrets/consul/consul-client.crt\" }}"
-        destination = "secrets/consul-client.crt"
+        destination = "etc/diplonat/consul-client.crt"
       }
 
       template {
         data = "{{ key \"secrets/consul/consul-client.key\" }}"
-        destination = "secrets/consul-client.key"
+        destination = "etc/diplonat/consul-client.key"
       }
 
       template {