forked from Deuxfleurs/infrastructure
111 lines
2.5 KiB
HCL
111 lines
2.5 KiB
HCL
job "garage" {
|
|
datacenters = ["dc1", "belair", "saturne"]
|
|
type = "system"
|
|
priority = 80
|
|
|
|
constraint {
|
|
attribute = "${attr.cpu.arch}"
|
|
value = "amd64"
|
|
}
|
|
|
|
group "garage" {
|
|
network {
|
|
port "s3" { static = 3900 }
|
|
port "rpc" { static = 3901 }
|
|
port "web" { static = 3902 }
|
|
}
|
|
|
|
update {
|
|
max_parallel = 1
|
|
min_healthy_time = "30s"
|
|
healthy_deadline = "5m"
|
|
}
|
|
|
|
task "server" {
|
|
driver = "docker"
|
|
config {
|
|
advertise_ipv6_address = true
|
|
image = "lxpz/garage_amd64:v0.2.1"
|
|
network_mode = "host"
|
|
volumes = [
|
|
"/mnt/storage/garage/data:/garage/data",
|
|
"/mnt/ssd/garage/meta:/garage/meta",
|
|
"secrets/garage.toml:/garage/config.toml",
|
|
"secrets/garage-ca.crt:/garage/garage-ca.crt",
|
|
"secrets/garage.crt:/garage/garage.crt",
|
|
"secrets/garage.key:/garage/garage.key",
|
|
]
|
|
}
|
|
|
|
template {
|
|
data = file("../config/garage.toml")
|
|
destination = "secrets/garage.toml"
|
|
}
|
|
|
|
# --- secrets ---
|
|
template {
|
|
data = "{{ key \"secrets/garage/garage-ca.crt\" }}"
|
|
destination = "secrets/garage-ca.crt"
|
|
}
|
|
template {
|
|
data = "{{ key \"secrets/garage/garage.crt\" }}"
|
|
destination = "secrets/garage.crt"
|
|
}
|
|
template {
|
|
data = "{{ key \"secrets/garage/garage.key\" }}"
|
|
destination = "secrets/garage.key"
|
|
}
|
|
|
|
resources {
|
|
memory = 500
|
|
cpu = 1000
|
|
}
|
|
|
|
kill_signal = "SIGINT"
|
|
kill_timeout = "20s"
|
|
|
|
service {
|
|
tags = [
|
|
"garage_api",
|
|
"traefik.enable=true",
|
|
"traefik.frontend.entryPoints=https,http",
|
|
"traefik.frontend.rule=Host:garage.deuxfleurs.fr"
|
|
]
|
|
port = 3900
|
|
address_mode = "driver"
|
|
name = "garage-api"
|
|
check {
|
|
type = "tcp"
|
|
port = 3900
|
|
address_mode = "driver"
|
|
interval = "60s"
|
|
timeout = "5s"
|
|
check_restart {
|
|
limit = 3
|
|
grace = "90s"
|
|
ignore_warnings = false
|
|
}
|
|
}
|
|
}
|
|
|
|
service {
|
|
tags = ["garage-rpc"]
|
|
port = 3901
|
|
address_mode = "driver"
|
|
name = "garage-rpc"
|
|
check {
|
|
type = "tcp"
|
|
port = 3901
|
|
address_mode = "driver"
|
|
interval = "60s"
|
|
timeout = "5s"
|
|
check_restart {
|
|
limit = 3
|
|
grace = "90s"
|
|
ignore_warnings = false
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|