99 lines
2.2 KiB
HCL
99 lines
2.2 KiB
HCL
job "gitea" {
|
|
region = "global"
|
|
datacenters = [ "nazrin" ]
|
|
type = "service"
|
|
group "svc" {
|
|
count = 1
|
|
network {
|
|
mode = "bridge"
|
|
port "http" {
|
|
static = 5000
|
|
to = 3000
|
|
}
|
|
port "ssh_pass" {
|
|
static = 222
|
|
to = 22
|
|
}
|
|
port "db" {
|
|
to = 5432
|
|
}
|
|
}
|
|
service {
|
|
name = "gitea-http"
|
|
port = "http"
|
|
}
|
|
vault {
|
|
policies = [ "giteapolicy" ]
|
|
}
|
|
task "app" {
|
|
template {
|
|
data = <<EOF
|
|
APP_NAME=Natto Tea
|
|
RUN_MODE=prod
|
|
SSH_DOMAIN=git.weirdnatto.in
|
|
ROOT_URL=https://git.weirdnatto.in/
|
|
SSH_PORT=22
|
|
SSH_LISTEN_PORT=22
|
|
USER_UID=1002
|
|
USER_GID=1002
|
|
GITEA__database__DB_TYPE=postgres
|
|
GITEA__database__NAME=gitea
|
|
GITEA__database__USER=gitea
|
|
GITEA__database__HOST=localhost:{{ env "NOMAD_PORT_db" }}
|
|
{{with secret "kv/data/gitea"}}
|
|
GITEA__database__PASSWD_FILE={{.Data.data.dbpass}}
|
|
GITEA__mailer__ENABLED=true
|
|
GITEA__mailer__FROM={{.Data.data.mailer}}
|
|
GITEA__mailer__TYPE=smtp
|
|
GITEA__mailer__HOST={{.Data.data.mailhost}}
|
|
GITEA__mailer__IS_TLS_ENABLED=true
|
|
GITEA__mailer__USER={{.Data.data.mailer}}
|
|
GITEA__mailer__PASSWD={{.Data.data.mailerpass}}
|
|
GITEA__service__REGISTER_EMAIL_CONFIRM=true
|
|
GITEA__oauth2_client__REGISTER_EMAIL_CONFIRM=true
|
|
{{end}}
|
|
EOF
|
|
destination = "${NOMAD_SECRETS_DIR}/data.env"
|
|
env = true
|
|
}
|
|
driver = "docker"
|
|
config {
|
|
image = "gitea/gitea:dev-linux-arm64"
|
|
ports = [ "http", "ssh_pass" ]
|
|
volumes = [ "/var/lib/nomad-st/gitea:/data" ]
|
|
}
|
|
resources {
|
|
cpu = 1024
|
|
memory = 512
|
|
}
|
|
}
|
|
task "db" {
|
|
template {
|
|
data = <<EOF
|
|
{{with secret "kv/data/gitea"}}{{.Data.data.dbpass}}{{end}}
|
|
EOF
|
|
destination = "${NOMAD_SECRETS_DIR}/gitea_db.pass"
|
|
}
|
|
driver = "docker"
|
|
config {
|
|
image = "postgres:alpine"
|
|
ports = ["db"]
|
|
volumes = [ "/var/lib/nomad-st/postgres-gitea:/var/lib/postgresql/data" ]
|
|
}
|
|
env {
|
|
POSTGRES_USER = "gitea"
|
|
POSTGRES_PASSWORD_FILE="${NOMAD_SECRETS_DIR}/gitea_db.pass"
|
|
POSTGRES_DB = "gitea"
|
|
}
|
|
resources {
|
|
cpu = 200
|
|
memory = 128
|
|
}
|
|
service {
|
|
name = "gitea-db"
|
|
port = "db"
|
|
}
|
|
}
|
|
}
|
|
}
|