forked from Deuxfleurs/infrastructure
118 lines
2.9 KiB
HCL
118 lines
2.9 KiB
HCL
job "web_static" {
|
|
datacenters = ["dc1"]
|
|
type = "service"
|
|
|
|
constraint {
|
|
attribute = "${attr.cpu.arch}"
|
|
value = "amd64"
|
|
}
|
|
|
|
group "landing" {
|
|
network {
|
|
port "deuxfleurs_port" { to = 8080 }
|
|
}
|
|
|
|
task "server" {
|
|
driver = "docker"
|
|
config {
|
|
image = "superboum/amd64_webpull_pug:v4"
|
|
ports = [ "deuxfleurs_port" ]
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
WEBPULL_REPO="https://git.deuxfleurs.fr/Deuxfleurs/site.git"
|
|
WEBPULL_TOKEN="{{ key "secrets/web/home_token" | trimSpace }}"
|
|
EOH
|
|
destination = "secrets/env"
|
|
env = true
|
|
}
|
|
|
|
resources {
|
|
memory = 200
|
|
}
|
|
|
|
service {
|
|
tags = [
|
|
"webstatic",
|
|
"traefik.enable=true",
|
|
"traefik.frontend.entryPoints=https,http",
|
|
"traefik.frontend.rule=Host:deuxfleurs.fr,www.deuxfleurs.fr,deuxfleurs.org,www.deuxfleurs.org;PathPrefix:/",
|
|
"traefik.frontend.priority=10"
|
|
# Ideally we would have a rewrite regex like this https://regex101.com/r/WHrABU/1
|
|
# See how it does not handle "http://deuxfleurs.fr/"? Not a big deal since HTTPS is redirected somewhere else
|
|
#"traefik.frontend.redirect.regex=^https?://(www\.deuxfleurs\.fr|deuxfleurs\.org|www\.deuxfleurs\.org)(.*)$",
|
|
#"traefik.frontend.redirect.replacement=https://deuxfleurs.fr/$${2}",
|
|
# Only set permanent redirect when it is guaranteed to work
|
|
#"traefik.frontend.redirect.permanent=true",
|
|
]
|
|
port = "deuxfleurs_port"
|
|
address_mode = "host"
|
|
name = "landing"
|
|
check {
|
|
type = "tcp"
|
|
port = "deuxfleurs_port"
|
|
interval = "60s"
|
|
timeout = "5s"
|
|
check_restart {
|
|
limit = 3
|
|
grace = "90s"
|
|
ignore_warnings = false
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
group "quentin" {
|
|
network {
|
|
port "quentin_port" { to = 8080 }
|
|
}
|
|
|
|
task "server" {
|
|
driver = "docker"
|
|
config {
|
|
image = "superboum/amd64_webpull_ruby:v1"
|
|
ports = [ "quentin_port" ]
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
WEBPULL_REPO="https://git.deuxfleurs.fr/quentin/quentin.dufour.io.git"
|
|
WEBPULL_TOKEN="{{ key "secrets/web/quentin.dufour.io_token" | trimSpace }}"
|
|
EOH
|
|
destination = "secrets/env"
|
|
env = true
|
|
}
|
|
|
|
resources {
|
|
memory = 500
|
|
}
|
|
|
|
service {
|
|
tags = [
|
|
"webstatic",
|
|
"traefik.enable=true",
|
|
"traefik.frontend.entryPoints=https",
|
|
"traefik.frontend.rule=Host:quentin.dufour.io,www.quentin.dufour.io;PathPrefix:/"
|
|
]
|
|
port = "quentin_port"
|
|
address_mode = "host"
|
|
name = "blog-quentin"
|
|
check {
|
|
type = "tcp"
|
|
port = "quentin_port"
|
|
interval = "60s"
|
|
timeout = "5s"
|
|
check_restart {
|
|
limit = 3
|
|
grace = "90s"
|
|
ignore_warnings = false
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|