miniflux/miniflux.nomad.hcl

90 lines
2.0 KiB
HCL

job "[[ .instance ]]" {
[[- $c := merge .miniflux . ]]
[[ template "common/job_start" $c ]]
group "miniflux" {
count = [[ .miniflux.count ]]
network {
mode = "bridge"
[[- if $c.prometheus.enabled ]]
port "metrics" {}
[[- end ]]
}
ephemeral_disk {
size = 101
}
service {
name = "[[ .instance ]][[ .consul.suffix ]]"
port = 8085
[[ template "common/prometheus_meta" $c ]]
[[ template "common/connect" $c ]]
check {
type = "http"
path = "/healthcheck"
expose = true
interval = "10s"
timeout = "3s"
check_restart {
limit = 20
grace = "20s"
}
}
tags = [
[[ template "common/traefik_tags" $c ]]
]
}
[[ template "common/task.metrics_proxy" $c ]]
[[ template "common/task.wait_for" $c ]]
[[ template "common/task.pgpooler" $c ]]
task "miniflux" {
driver = "[[ $c.nomad.driver ]]"
config {
image = "[[ .miniflux.image ]]"
pids_limit = 100
readonly_rootfs = true
}
[[ template "common/vault.policies" $c ]]
env {
LISTEN_ADDR = "127.0.0.1:8085"
BASE_URL = "[[ .miniflux.public_url ]]"
[[- if $c.prometheus.enabled ]]
METRICS_COLLECTOR = 1
[[- end ]]
[[ template "common/proxy_env" $c ]]
}
template {
data =<<_EOT
DATABASE_URL=postgresql://
[[- if ne $c.postgres.pooler.engine "none" -]]
[[ .instance ]]:{{ env "NOMAD_ALLOC_ID" }}@127.0.0.1:[[ $c.postgres.pooler.port ]]/[[ $c.postgres.database ]]?sslmode=disable
[[- else -]]
[[ $c.postgres.user ]]:[[ $c.postgres.password | regexp.Replace "\\.Data\\.password" "urlquery .Data.password" ]]@[[ $c.postgres.host ]]:[[ $c.postgres.port ]]/[[ $c.postgres.database ]]?sslmode=disable
[[- end ]]
_EOT
destination = "secrets/.db.env"
perms = 400
env = true
}
[[ template "common/file_env" $c ]]
[[ template "common/resources" $c ]]
}
}
}