nomad
/
immich
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update rendered example

This commit is contained in:
Daniel Berteaud 2024-03-05 14:49:53 +01:00
parent 63c013cc7b
commit d9641f95ca
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
example/immich.nomad.hcl
View File

@ -105,7 +105,7 @@ job "immich" {
user = 1053
config {
image = "danielberteaud/wait-for:24.2-1"
image = "danielberteaud/wait-for:24.3-1"
readonly_rootfs = true
pids_limit = 20
}
@ -174,7 +174,7 @@ _EOT
template {
data = <<_EOT
DB_URL=postgres://{{ with secret "/database/creds/immich" }}{{ .Data.username }}{{ end }}:{{ with secret "/database/creds/immich" }}{{ .Data.password }}{{ end }}@127.0.0.1:5432/immich
DB_URL=postgres://{{ with secret "database/creds/immich" }}{{ .Data.username }}{{ end }}:{{ with secret "database/creds/immich" }}{{ .Data.password }}{{ end }}@127.0.0.1:5432/immich
_EOT
destination = "secrets/.db.env"
perms = 400
@ -241,7 +241,7 @@ _EOT
template {
data = <<_EOT
DB_URL=postgres://{{ with secret "/database/creds/immich" }}{{ .Data.username }}{{ end }}:{{ with secret "/database/creds/immich" }}{{ .Data.password }}{{ end }}@127.0.0.1:5432/immich
DB_URL=postgres://{{ with secret "database/creds/immich" }}{{ .Data.username }}{{ end }}:{{ with secret "database/creds/immich" }}{{ .Data.password }}{{ end }}@127.0.0.1:5432/immich
_EOT
destination = "secrets/.db.env"
perms = 400

2
example/init/vault-database
View File

@ -2,7 +2,7 @@
set -euo pipefail
vault write /database/roles/immich \
vault write database/roles/immich \
db_name="postgres" \
creation_statements="CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; \
GRANT \"immich\" TO \"{{name}}\"; \

4
example/vault/policies/immich.hcl
View File

@ -1,7 +1,7 @@
path "/database/creds/immich" {
path "database/creds/immich" {
capabilities = ["read"]
}
path "/kv/data/service/immich" {
path "kv/data/service/immich" {
capabilities = ["read"]
}