job "core:tricot" { datacenters = ["orion", "neptune", "scorpio", "bespin"] type = "system" priority = 90 update { max_parallel = 1 stagger = "5m" } group "tricot" { constraint { distinct_property = "${meta.site}" value = "1" } network { port "http_port" { static = 80 } port "https_port" { static = 443 } port "metrics_port" { static = 9334 } } task "server" { driver = "docker" config { image = "lxpz/amd64_tricot:47" network_mode = "host" readonly_rootfs = true ports = [ "http_port", "https_port" ] volumes = [ "secrets:/etc/tricot", ] } resources { cpu = 1000 memory = 200 memory_max = 500 } restart { interval = "5m" attempts = 10 delay = "15s" mode = "delay" } template { data = "{{ key \"secrets/consul/consul-ca.crt\" }}" destination = "secrets/consul-ca.crt" } template { data = "{{ key \"secrets/consul/consul-client.crt\" }}" destination = "secrets/consul-client.crt" } template { data = "{{ key \"secrets/consul/consul-client.key\" }}" destination = "secrets/consul-client.key" } template { data = <