job "seafile" { datacenters = ["dc1"] type = "service" priority = 10 constraint { attribute = "${attr.cpu.arch}" value = "amd64" } group "main" { count = 1 network { port "seafile-frontend_port" { static = 8000 } port "seafile-seafhttp_port" { static = 8083 } port "seafile-dav_port" { static = 8084 } port "seafile-hack_port" { static = 8085 } port "mariadb_port" { static = 3306 } } task "mariadb" { driver = "docker" config { image = "superboum/amd64_mariadb:v4" network_mode = "host" command = "tail" ports = [ "mariadb_port" ] args = [ "-f", "/var/log/mysql/error.log", ] volumes = [ "/mnt/glusterfs/mariadb/main/server:/var/lib/mysql", ] } template { data = file("../config/configuration/mariadb/main/env.tpl") destination = "secrets/env" env = true } resources { memory = 800 } service { tags = ["mariadb"] port = "mariadb_port" address_mode = "host" name = "mariadb" check { type = "tcp" port = "mariadb_port" interval = "60s" timeout = "5s" check_restart { limit = 3 grace = "90s" ignore_warnings = false } } } } task "hack" { driver = "docker" config { image = "alpine/socat:1.0.5" network_mode = "host" ports = [ "seafile-hack_port" ] command = "tcp6-listen:8085,fork,reuseaddr" args = [ "tcp-connect:127.0.0.1:8083" ] } resources { memory = 10 } service { tags = [ "seafile", "traefik.enable=true", "traefik.frontend.entryPoints=https,http", "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefixStrip:/seafhttp" ] port = "seafile-hack_port" address_mode = "host" name = "seafhttp" check { type = "tcp" port = "seafile-hack_port" interval = "60s" timeout = "5s" check_restart { limit = 3 grace = "90s" ignore_warnings = false } } } } task "server" { driver = "docker" config { image = "superboum/amd64_seafile:v6" network_mode = "host" ports = [ "seafile-frontend_port", "seafile-dav_port", "seafile-seafhttp_port" ] ## cmd + args are used for running an instance attachable for update # command = "/bin/sleep" # args = ["999999"] mounts = [ { type = "bind" source = "/mnt/glusterfs/seafile" target = "/mnt/seafile-data" } ] volumes = [ "secrets/conf:/srv/webstore/conf", "secrets/ccnet:/srv/webstore/ccnet" ] } resources { memory = 600 } service { tags = [ "seafile", "traefik.enable=true", "traefik.frontend.entryPoints=https,http", "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefix:/" ] port = "seafile-frontend_port" address_mode = "host" name = "seahub" check { type = "tcp" port = "seafile-frontend_port" interval = "60s" timeout = "5s" check_restart { limit = 3 grace = "90s" ignore_warnings = false } } } service { tags = [ "seafile", "traefik.enable=true", "traefik.frontend.entryPoints=https,http", "traefik.frontend.rule=Host:cloud.deuxfleurs.fr;PathPrefix:/seafdav" ] port = "seafile-dav_port" address_mode = "host" name = "seafdav" check { type = "tcp" port = "seafile-dav_port" interval = "60s" timeout = "5s" check_restart { limit = 3 grace = "90s" ignore_warnings = false } } } template { data = file("../config/configuration/seafile/conf/ccnet.conf.tpl") destination = "secrets/conf/ccnet.conf" } template { data = file("../config/configuration/seafile/conf/seafile.conf.tpl") destination = "secrets/conf/seafile.conf" } template { data = file("../config/configuration/seafile/conf/seahub_settings.py.tpl") destination = "secrets/conf/seahub_settings.py" } template { data = file("../config/configuration/seafile/ccnet/seafile.ini") destination = "secrets/ccnet/seafile.ini" } template { data = file("../config/configuration/seafile/conf/seafdav.conf") destination = "secrets/conf/seafdav.conf" } template { data = file("../config/configuration/seafile/conf/gunicorn.conf") destination = "secrets/conf/gunicorn.conf" } # ---- secrets ---- template { data = "{{ key \"secrets/seafile/conf/mykey.peer\" }}" destination = "secrets/ccnet/mykey.peer" } template { data = "{{ key \"secrets/seafile/conf/mykey.peer\" }}" destination = "secrets/conf/mykey.peer" } } } }