minor

hammerhead/README.md

@@ -17,8 +17,11 @@
 
 		Solution: each new service needs to add its nginx configuration to `app/nginx/config`.
 
+	* The services URL should be accessible from Consul using tags, instead of being hard-coded in configuration files.
+	* The dummy HTTP server replicas must not be accessible through the Internet.
 	* TLS: Let's Encrypt will probably be part of the same job definition as nginx.
 
+
 2. Gitea migration
 
 	* Postgres database: needs to be its own Nomad job.

hammerhead/app/dummy-http-server/deploy/dummy-http-server.hcl

@@ -16,6 +16,9 @@ job "dummy-http-server" {
         interval = "2s"
         timeout  = "2s"
       }
+      tags = [
+        "url=dummy.hammerhead.luxeylab.net"
+      ]
     }
 
     task "server" {

hammerhead/app/nginx/deploy/nginx.hcl

@@ -8,7 +8,16 @@ job "nginx" {
       port "http" {
         static = 80
       }
+      port "https" {
+        static = 443
       }
+    }
+
+    # volume "certs" {
+    #   type      = "host"
+    #   source    = "ca-certificates"
+    #   # read_only = true
+    # }
 
     service {
       name = "nginx"
@@ -19,10 +28,11 @@ job "nginx" {
       driver = "docker"
 
       config {
-        ports = ["http"]
+        ports = ["http", "https"]
         image = "nginx"
         volumes = [
           "local:/etc/nginx/conf.d",
+          #"certs:..."
         ]
       }