common/variables.yml

---

locale:
  # Timezone to set inside containers
  tz: Europe/Paris
  lang: fr_FR.utf8

vault:
  # A prefix for all vault mount points. Usefull if you have different environnements
  # This is an alternative to using vault namespaces as Nomad Community doesn't support it
  prefix: ""
  # Configuration for new PKI
  pki:
    organization: Ehtrace
    ou: Internal PKI
    country: FR
    locality: Pessac
    ttl: 131400h
    key_bits: 4096
    key_type: rsa

nomad:
  # List of datacenters jobs will be deployed to
  datacenters:
    - dc1

  # Default task driver
  driver: docker

consul:
  # Domain name used by consul (to lookup services by DNS name)
  domain: consul

  # A prefix for consul KV store. Same as for vault prefix
  prefix: ""

  # A suffix to add to service names. Alternative to Consul namespaces as community Consul
  # doesn't support them
  # You can set it for example like this
  # suffix: "-qa"
  # And a postgres service for example will be registered on consul as postgres-qa
  # All the policies (vault, consul and nomad) will also be suffixed so they won't clash between
  # your env
  suffix: ""

  # Consul connect config
  connect:
    upstreams: []
    resources:
      cpu: 50
      memory: 64

# Traefik settings
traefik:
  # This will be both the service name and the prefix used in tags
  instance: traefik
  # Defaults list of entrypoints to use
  entrypoints:
    - https
  # Default middlewares to attach
  base_middlewares:
    - rate-limit-std@file
    - inflight-std@file
    - security-headers@file
    - hsts@file
    - compression@file
    - csp-relaxed@file
  middlewares: []

# Default env vars for all your tasks
env:
  TZ: "[[ .locale.tz ]]"
  LANG: "[[ .locale.lang ]]"

proxy:
  # A list of IP/hostname for which requests won't go through a (potentially) defined proxy
  no_proxy:
    - '*.consul'
    - localhost
    - 127.*
  # Address of the proxy
  # address: http://localhost:3128

# The name of a service providing SMTP capabilitites through the service mesh
# Can be used to easily switch from a mailpit to a real smtp relay for example
mail:
  # The name of a service providing SMTP capabilitites through the service mesh
  # Can be used to easily switch from a mailpit to a real smtp relay for example
  smtp_service_name: smtp

prometheus:
  # Controls if prometheus metrics should be enabled on all tasks supporting it
  enabled: False

docker:
  # Your repo where locally built images will be pushed
  repo: danielberteaud/
  maintainer: Daniel Berteaud <dbd@ehtrace.com>
  # Common base images
  base_images:
    # wait for services to be online, allow configuring service dependencies
    wait_for:
      image: wait-for:23.11-2

    # AlmaLinux 8
    alma8:
      image: alma:8.23.11-4
      build_args:
        ALMA: 8

    # AlmaLinux 9
    alma9:
      image: alma:9.23.11-4
      build_args:
        ALMA: 9

    # Latest alpine
    alpine:
      image: alpine:23.11-5

    # Alpine with Java8 (temurin)
    java8:
      image: java:8.23.11-2
      build_args:
        JAVA_VERSION: 8

    # Alpine with Java11 (temurin)
    java11:
      image: java:11.23.11-2
      build_args:
        JAVA_VERSION: 11

    # Alpine with Java17 (temurin)
    java17:
      image: java:17.23.11-2
      build_args:
        JAVA_VERSION: 17

    # Alpine with Java21 (temurin)
    java21:
      image: java:21.23.11-2
      build_args:
        JAVA_VERSION: 21

    # Postgres
    postgres15:
      image: postgres:15.23.11-3
      build_args:
        POSTGRES_VERSION: 15

    # Mariadb client
    mariadb_client:
      image: mariadb-client:23.11-2

    # MongoDB
    mongo50:
      image: mongo:5.0.23.11-2
      build_args:
        MONGO_MAJOR: "5.0"

    # SQLite
    sqlite:
      image: sqlite:23.11-2

    # Logrotate
    logrotate:
      image: logrotate:23.11-2

    # Lavinmq (AMQP server)
    lavinmq:
      image: lavinmq:1.25.0-4