forked from Deuxfleurs/nixcfg
62 lines
1.6 KiB
HCL
62 lines
1.6 KiB
HCL
|
job "telemetry-system" {
|
||
|
|
datacenters = ["neptune"]
|
||
|
|
type = "system"
|
||
|
|
|
||
|
|
group "elasticsearch" {
|
||
|
|
network {
|
||
|
|
port "elastic" {
|
||
|
|
static = 9200
|
||
|
|
}
|
||
|
|
port "elastic_internal" {
|
||
|
|
static = 9300
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
task "elastic" {
|
||
|
|
driver = "docker"
|
||
|
|
config {
|
||
|
|
image = "docker.elastic.co/elasticsearch/elasticsearch:7.17.0"
|
||
|
|
network_mode = "host"
|
||
|
|
volumes = [
|
||
|
|
"/mnt/ssd/telemetry/es_data:/usr/share/elasticsearch/data",
|
||
|
|
]
|
||
|
|
ports = [ "elastic", "elastic_internal" ]
|
||
|
|
sysctl = {
|
||
|
|
#"vm.max_map_count" = "262144",
|
||
|
|
}
|
||
|
|
ulimit = {
|
||
|
|
memlock = "9223372036854775807:9223372036854775807",
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
resources {
|
||
|
|
memory = 2500
|
||
|
|
cpu = 500
|
||
|
|
}
|
||
|
|
|
||
|
|
template {
|
||
|
|
data = <<EOH
|
||
|
|
node.name={{ env "attr.unique.hostname" }}
|
||
|
|
http.port=9200
|
||
|
|
transport.port=9300
|
||
|
|
cluster.name=es-deuxfleurs
|
||
|
|
cluster.initial_master_nodes=caribou,cariacou,carcajou
|
||
|
|
discovery.seed_hosts=carcajou,caribou,cariacou
|
||
|
|
bootstrap.memory_lock=true
|
||
|
|
xpack.security.enabled=true
|
||
|
|
xpack.security.authc.api_key.enabled=true
|
||
|
|
xpack.security.transport.ssl.enabled=true
|
||
|
|
xpack.security.transport.ssl.verification_mode=certificate
|
||
|
|
xpack.security.transport.ssl.client_authentication=required
|
||
|
|
xpack.security.transport.ssl.keystore.path=/usr/share/elasticsearch/data/elastic-certificates.p12
|
||
|
|
xpack.security.transport.ssl.truststore.path=/usr/share/elasticsearch/data/elastic-certificates.p12
|
||
|
|
ES_JAVA_OPTS=-Xms512M -Xmx512M
|
||
|
|
EOH
|
||
|
|
destination = "secrets/env"
|
||
|
|
env = true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|