Deuxfleurs/nixcfg
14
7
Fork 2
Code Issues 19 Pull requests 2 Projects Releases Wiki Activity

update tricot & garage deployment

Browse source
This commit is contained in:
Quentin 2025-04-11 10:34:56 +02:00
parent 455b568940
commit f7cbf12400
Signed by: quentin
GPG key ID: E9602264D639FF68
2 changed files with 1 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
cluster/prod/app/core/deploy/tricot.hcl
View file

@ -1,9 +1,5 @@
job "core-tricot" { job "core-tricot" {
# bespin pas pour l'instant, on a des soucis de SSL avec gitea datacenters = ["corrin", "bespin", "scorpio"]
# on pourra mettre bespin quand on aura migré gitea de la vm vers le cluster
# en attendant, les deux ne sont pas capables de partager les certificats SSL
# donc on laisse la VM gitea gérer les certifs et prendre tout le trafic http(s)
datacenters = ["corrin", "neptune", "scorpio"]
type = "system" type = "system"
priority = 90 priority = 90
@ -43,7 +39,6 @@ job "core-tricot" {
resources { resources {
cpu = 1000 cpu = 1000
memory = 200 memory = 200
memory_max = 500
} }
restart { restart {

1
cluster/prod/app/garage/deploy/garage.hcl
View file

@ -169,7 +169,6 @@ job "garage" {
"garage-web", "garage-web",
"tricot * 1", "tricot * 1",
"tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload", "tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload",
"tricot-add-header X-Frame-Options SAMEORIGIN",
"tricot-add-header X-XSS-Protection 1; mode=block", "tricot-add-header X-XSS-Protection 1; mode=block",
"tricot-add-header X-Content-Type-Options nosniff", "tricot-add-header X-Content-Type-Options nosniff",
"tricot-on-demand-tls-ask http://garage-admin.service.prod.consul:3903/check", "tricot-on-demand-tls-ask http://garage-admin.service.prod.consul:3903/check",