forked from Deuxfleurs/nixcfg
75 lines
1.5 KiB
HCL
75 lines
1.5 KiB
HCL
|
job "cms" {
|
||
|
datacenters = ["neptune", "orion"]
|
||
|
type = "service"
|
||
|
|
||
|
priority = 100
|
||
|
|
||
|
constraint {
|
||
|
attribute = "${attr.cpu.arch}"
|
||
|
value = "amd64"
|
||
|
}
|
||
|
|
||
|
group "auth" {
|
||
|
count = 1
|
||
|
|
||
|
network {
|
||
|
port "web_port" { }
|
||
|
}
|
||
|
|
||
|
task "teabag" {
|
||
|
driver = "docker"
|
||
|
config {
|
||
|
# Using a digest to pin the container as no tag is provided
|
||
|
# https://github.com/denyskon/teabag/pkgs/container/teabag
|
||
|
image = "ghcr.io/denyskon/teabag@sha256:d5af7c6caf172727fbfa047c8ee82f9087ef904f0f3bffdeec656be04e9e0a14"
|
||
|
ports = [ "web_port" ]
|
||
|
volumes = [
|
||
|
"secrets/teabag.env:/etc/teabag/teabag.env",
|
||
|
]
|
||
|
}
|
||
|
|
||
|
template {
|
||
|
data = file("../config/teabag.env")
|
||
|
destination = "secrets/teabag.env"
|
||
|
}
|
||
|
|
||
|
resources {
|
||
|
memory = 20
|
||
|
memory_max = 50
|
||
|
cpu = 50
|
||
|
}
|
||
|
|
||
|
service {
|
||
|
name = "teabag"
|
||
|
tags = [
|
||
|
"teabag",
|
||
|
"tricot teabag.deuxfleurs.fr",
|
||
|
"d53-cname teabag.deuxfleurs.fr",
|
||
|
]
|
||
|
port = "web_port"
|
||
|
check {
|
||
|
type = "http"
|
||
|
protocol = "http"
|
||
|
port = "web_port"
|
||
|
path = "/"
|
||
|
interval = "60s"
|
||
|
timeout = "5s"
|
||
|
check_restart {
|
||
|
limit = 3
|
||
|
grace = "600s"
|
||
|
ignore_warnings = false
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
restart {
|
||
|
interval = "30m"
|
||
|
attempts = 20
|
||
|
delay = "15s"
|
||
|
mode = "delay"
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|