Staging: run diplonat as nix job

This commit is contained in:
Alex 2022-12-01 22:32:02 +01:00
parent d3fac34e63
commit bc88622ea2
Signed by untrusted user: lx
GPG key ID: 0E496D15096376BE

View file

@ -15,16 +15,16 @@ job "core" {
group "network" { group "network" {
task "diplonat" { task "diplonat" {
driver = "docker" driver = "nix2"
config { config {
image = "lxpz/amd64_diplonat:3" packages = [
network_mode = "host" "#iptables",
readonly_rootfs = true "git+https://git.deuxfleurs.fr/Deuxfleurs/diplonat.git?ref=main&rev=f306e8dc8d0e93478353ce39b6064e8c06a8bca6"
volumes = [
"secrets:/etc/diplonat",
] ]
command = "diplonat"
} }
user = "root"
restart { restart {
interval = "30m" interval = "30m"
@ -35,17 +35,17 @@ job "core" {
template { template {
data = "{{ key \"secrets/consul/consul-ca.crt\" }}" data = "{{ key \"secrets/consul/consul-ca.crt\" }}"
destination = "secrets/consul-ca.crt" destination = "etc/diplonat/consul-ca.crt"
} }
template { template {
data = "{{ key \"secrets/consul/consul-client.crt\" }}" data = "{{ key \"secrets/consul/consul-client.crt\" }}"
destination = "secrets/consul-client.crt" destination = "etc/diplonat/consul-client.crt"
} }
template { template {
data = "{{ key \"secrets/consul/consul-client.key\" }}" data = "{{ key \"secrets/consul/consul-client.key\" }}"
destination = "secrets/consul-client.key" destination = "etc/diplonat/consul-client.key"
} }
template { template {