homelab-nomad/core/traefik/traefik.tf

resource "nomad_job" "traefik" {
  jobspec = file("${path.module}/traefik.nomad")
}

resource "nomad_acl_policy" "treafik_secrets_certs_read" {
  name        = "traefik-secrets-certs-read"
  description = "Read certs to secrets store"
  rules_hcl   = <<EOH
namespace "default" {
  variables {
    path "secrets/certs/*" {
      capabilities = ["read"]
    }
    path "secrets/certs" {
      capabilities = ["read"]
    }
  }
}
EOH
  job_acl {
    job_id = resource.nomad_job.traefik.id
  }
}

resource "nomad_acl_policy" "traefik_query_jobs" {
  name        = "traefik-query-jobs"
  description = "Allow traefik to query jobs"
  rules_hcl   = <<EOH
namespace "default" {
  capabilities = ["list-jobs", "read-job"]
}
EOH
  job_acl {
    job_id = resource.nomad_job.traefik.id
  }
}

resource "nomad_acl_policy" "treafik_external" {
  name        = "traefik-exernal"
  description = "Read external services"
  rules_hcl   = <<EOH
namespace "default" {
  variables {
    path "traefik_external/*" {
      capabilities = ["read"]
    }
  }
}
EOH
  job_acl {
    job_id = "traefik"
  }
}

resource "nomad_variable" "traefik_external_hass" {
  path = "traefik_external/hass"
  items = {
    name      = "hass"
    subdomain = "hass",
    url       = "http://192.168.3.65:8123"
  }
}

resource "nomad_variable" "traefik_external_plex" {
  path = "traefik_external/plex"
  items = {
    name      = "plex"
    subdomain = "plex",
    url       = "http://agnosticfront.thefij:32400"
  }
}

resource "nomad_variable" "traefik_external_appdaemon" {
  path = "traefik_external/appdaemon"
  items = {
    name      = "appdaemon"
    subdomain = "appdash",
    url       = "http://192.168.3.65:5050"
    # path_prefix = "/add"
  }
}