From 5acb814abd077266a25096b54e5f2ab639d95e67 Mon Sep 17 00:00:00 2001
From: Ian Fijolek <ian@iamthefij.com>
Date: Wed, 13 Apr 2022 14:01:14 -0700
Subject: [PATCH] Lint, format, lock

---
 .gitignore                    |  1 +
 Makefile                      |  1 -
 acls/.terraform.lock.hcl      | 38 +++++++++++++++++++++++++++++++++++
 acls/nomad_vault.tf           | 16 +++++++--------
 ansible_hosts.yml             |  4 ++--
 blocky/.terraform.lock.hcl    | 20 ++++++++++++++++++
 blocky/blocky.tf              |  4 ++--
 media/.terraform.lock.hcl     | 20 ++++++++++++++++++
 media/caddy.nomad             |  4 ++--
 metrics/.terraform.lock.hcl   | 18 +++++++++++++++++
 metrics/exporters.nomad       |  5 ++---
 metrics/metrics.tf            |  2 +-
 metrics/prometheus.nomad      |  2 +-
 mysql/.terraform.lock.hcl     | 38 +++++++++++++++++++++++++++++++++++
 nextcloud/.terraform.lock.hcl | 20 ++++++++++++++++++
 nextcloud/nextcloud.nomad     |  8 ++++----
 providers.tf                  | 12 +++++------
 redis/.terraform.lock.hcl     | 38 +++++++++++++++++++++++++++++++++++
 services.tf                   |  4 ++--
 traefik/.terraform.lock.hcl   | 38 +++++++++++++++++++++++++++++++++++
 traefik/traefik.tf            |  9 ++++-----
 vars.tf                       | 14 ++++++-------
 22 files changed, 272 insertions(+), 44 deletions(-)
 create mode 100644 acls/.terraform.lock.hcl
 create mode 100644 blocky/.terraform.lock.hcl
 create mode 100644 media/.terraform.lock.hcl
 create mode 100644 mysql/.terraform.lock.hcl
 create mode 100644 nextcloud/.terraform.lock.hcl
 create mode 100644 redis/.terraform.lock.hcl
 create mode 100644 traefik/.terraform.lock.hcl

diff --git a/.gitignore b/.gitignore
index 74e2eb5..767f996 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ roles/
 venv/
 vault-keys.json
 nomad_bootstrap.json
+ca/
diff --git a/Makefile b/Makefile
index d10cdc8..4f05470 100644
--- a/Makefile
+++ b/Makefile
@@ -77,4 +77,3 @@ apply:
 # curl -L -o cni-plugins.tgz "https://github.com/containernetworking/plugins/releases/download/v1.0.0/cni-plugins-linux-$( [ $(uname -m) = aarch64 ] && echo arm64 || echo amd64)"-v1.0.0.tgz
 # sudo mkdir -p /opt/cni/bin
 # sudo tar -C /opt/cni/bin -xzf cni-plugins.tgz
-
diff --git a/acls/.terraform.lock.hcl b/acls/.terraform.lock.hcl
new file mode 100644
index 0000000..e640ec8
--- /dev/null
+++ b/acls/.terraform.lock.hcl
@@ -0,0 +1,38 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/vault" {
+  version = "3.4.1"
+  hashes = [
+    "h1:oow6cAwKiFpJBBWKsDqNmwZIrFTWWvoeIbqs+vyUDE0=",
+    "zh:1eb8370a1846e34e2bcc4d11eece5733735784a8eab447bbed3cfd822101b577",
+    "zh:2df3989327cea68b2167514b7ebddc67b09340f00bbf3fa85df03c97adfb9d25",
+    "zh:3dd1e317264f574985e856296deef71a76464918bf0566eb0d7f6389ea0586bd",
+    "zh:9750861f2822482aa608ea5a52b385bc42b2e1f2511094e6a975412618c4495d",
+    "zh:9b940e7f78975d29a4d0a116cf43c0bc1cb03bec4ad8d34887d64e6e60bacb9e",
+    "zh:9cb6e7ad2a62529d35dacd20695d49c2f02230cb785d46178cc10f4ec80e5a51",
+    "zh:a12718689bbcb37bcbb9132c18bffd354fad8ab5c8cb89cec1a0ee85c65b8cb7",
+    "zh:a6e38afacca1af4fab04a9f2dc49b8295eb462db68bdc7451352d0f950f804f8",
+    "zh:d6e0e994d51b9e07d5713d4796381f9e129e9de962e79caae2b7055f6f68297e",
+    "zh:ea4bbef7a1bb2553db473fa304c93845674167b61e8c9677107a96c8c696da12",
+    "zh:f985a8b7f4ef7d1eba9cef7d99997ee9c4a54ffe76dab7fa8b1fdec2a9edca7e",
+  ]
+}
diff --git a/acls/nomad_vault.tf b/acls/nomad_vault.tf
index 28ba3c6..f2cfdef 100644
--- a/acls/nomad_vault.tf
+++ b/acls/nomad_vault.tf
@@ -4,25 +4,25 @@ resource "nomad_acl_token" "vault" {
 }
 
 resource "vault_nomad_secret_backend" "config" {
-    backend = "nomad"
-    description = "Nomad ACL"
-    token = nomad_acl_token.vault.secret_id
+  backend     = "nomad"
+  description = "Nomad ACL"
+  token       = nomad_acl_token.vault.secret_id
 }
 
 resource "vault_nomad_secret_role" "nomad-deploy" {
-  backend = vault_nomad_secret_backend.config.backend
-  role = "nomad-deploy"
+  backend  = vault_nomad_secret_backend.config.backend
+  role     = "nomad-deploy"
   policies = ["nomad-deploy"]
 }
 
 resource "vault_nomad_secret_role" "admin" {
   backend = vault_nomad_secret_backend.config.backend
-  role = "admin-management"
-  type = "management"
+  role    = "admin-management"
+  type    = "management"
 }
 
 resource "vault_policy" "nomad-deploy" {
-  name = "nomad-deploy"
+  name   = "nomad-deploy"
   policy = <<EOH
 path "nomad/creds/nomad-deploy" {
   capabilities = ["read"]
diff --git a/ansible_hosts.yml b/ansible_hosts.yml
index b66b790..0d5745a 100644
--- a/ansible_hosts.yml
+++ b/ansible_hosts.yml
@@ -42,10 +42,10 @@ all:
 
     consul_instances:
       children:
-        servers: {}
+        # servers: {}
     nomad_instances:
       children:
         servers: {}
     vault_instances:
       children:
-        servers: {}
+        # servers: {}
diff --git a/blocky/.terraform.lock.hcl b/blocky/.terraform.lock.hcl
new file mode 100644
index 0000000..4a078a2
--- /dev/null
+++ b/blocky/.terraform.lock.hcl
@@ -0,0 +1,20 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/blocky/blocky.tf b/blocky/blocky.tf
index cd578bc..9d1246f 100644
--- a/blocky/blocky.tf
+++ b/blocky/blocky.tf
@@ -1,7 +1,7 @@
 variable "base_hostname" {
-  type = string
+  type        = string
   description = "Base hostname to serve content from"
-  default = "dev.homelab"
+  default     = "dev.homelab"
 }
 
 locals {
diff --git a/media/.terraform.lock.hcl b/media/.terraform.lock.hcl
new file mode 100644
index 0000000..4a078a2
--- /dev/null
+++ b/media/.terraform.lock.hcl
@@ -0,0 +1,20 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/media/caddy.nomad b/media/caddy.nomad
index 48c0b15..019108d 100644
--- a/media/caddy.nomad
+++ b/media/caddy.nomad
@@ -43,7 +43,7 @@ job "multimedia" {
         "traefik.http.routers.library.entryPoints=websecure",
       ]
     }
-    
+
     task "main" {
       driver = "docker"
 
@@ -52,7 +52,7 @@ job "multimedia" {
         destination = "/mnt/media"
         read_only = true
       }
-      
+
       config {
         image = "caddy"
         args = [
diff --git a/metrics/.terraform.lock.hcl b/metrics/.terraform.lock.hcl
index 4a078a2..027dbaa 100644
--- a/metrics/.terraform.lock.hcl
+++ b/metrics/.terraform.lock.hcl
@@ -1,6 +1,24 @@
 # This file is maintained automatically by "terraform init".
 # Manual edits may be lost in future updates.
 
+provider "registry.terraform.io/hashicorp/consul" {
+  version = "2.15.0"
+  hashes = [
+    "h1:o+Su3YqeOkHgf86GEArIVDZfaZQphYFjAOwpi/b0bzs=",
+    "zh:0bd2a9873099d89bd52e9eee623dd20ccb275d1e2f750da229a53a4d5b23450c",
+    "zh:1c9f87d4d97b2c61d006c0bef159d61d2a661a103025f8276ebbeb000129f931",
+    "zh:25b73a34115255c464be10a53f2510c4a1db958a71be31974d30654d5472e624",
+    "zh:32fa31329731db2bf4b7d0f09096416ca146f05b58f4482bbd4ee0f28cefbbcc",
+    "zh:59136b73d3abe7cc5b06d9e12d123ad21298ca86ed49a4060a3cd7c2a28a74a1",
+    "zh:a191f3210773ca25c543a92f2d392b85e6a053d596293655b1f25b33eb843b4c",
+    "zh:b8b6033cf0687eadc1099f11d9fb2ca9429ff40c2d85bd6cb047c0f6bc5d5d8d",
+    "zh:bb7d67ed28aa9b28fc5154161af003383f940b2beda0d4577857cad700f39cd1",
+    "zh:be615288f59327b975532a1999deab60a022e6819fe80e5a32526155210ecbba",
+    "zh:de1e3d5c34eef87eb301e74717754babb6dc8e19e3a964919e1165c5a076a719",
+    "zh:eb8c61b20d8ce2bfff9f735ca8456a0d6368af13aa1f43866f61c70f88cc491c",
+  ]
+}
+
 provider "registry.terraform.io/hashicorp/nomad" {
   version = "1.4.16"
   hashes = [
diff --git a/metrics/exporters.nomad b/metrics/exporters.nomad
index bf76cf8..00fb2ba 100644
--- a/metrics/exporters.nomad
+++ b/metrics/exporters.nomad
@@ -90,7 +90,7 @@ job "metrics" {
 
     task "cadvisor" {
       driver = "docker"
-      
+
       config {
         # image = "iamthefij/cadvisor:0.37.5"
         image = "gcr.io/cadvisor/cadvisor:v0.39.3"
@@ -200,7 +200,7 @@ job "metrics" {
 
     task "node_exporter" {
       driver = "docker"
-      
+
       config {
         image = "prom/node-exporter:v1.0.1"
         args = ["--path.rootfs", "/host"]
@@ -222,4 +222,3 @@ job "metrics" {
     }
   }
 }
-
diff --git a/metrics/metrics.tf b/metrics/metrics.tf
index d12a3cd..6aab04c 100644
--- a/metrics/metrics.tf
+++ b/metrics/metrics.tf
@@ -1,5 +1,5 @@
 variable "consul_address" {
-  type    = string
+  type        = string
   description = "address of consul server for dynamic scraping"
 }
 
diff --git a/metrics/prometheus.nomad b/metrics/prometheus.nomad
index 29fc23c..1bd2dde 100644
--- a/metrics/prometheus.nomad
+++ b/metrics/prometheus.nomad
@@ -127,7 +127,7 @@ scrape_configs:
       - source_labels: [__meta_consul_address]
         replacement: $1:8500
         target_label: __address__
-        
+
   - job_name: "exporters"
     metrics_path: "/metrics"
     consul_sd_configs:
diff --git a/mysql/.terraform.lock.hcl b/mysql/.terraform.lock.hcl
new file mode 100644
index 0000000..027dbaa
--- /dev/null
+++ b/mysql/.terraform.lock.hcl
@@ -0,0 +1,38 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/consul" {
+  version = "2.15.0"
+  hashes = [
+    "h1:o+Su3YqeOkHgf86GEArIVDZfaZQphYFjAOwpi/b0bzs=",
+    "zh:0bd2a9873099d89bd52e9eee623dd20ccb275d1e2f750da229a53a4d5b23450c",
+    "zh:1c9f87d4d97b2c61d006c0bef159d61d2a661a103025f8276ebbeb000129f931",
+    "zh:25b73a34115255c464be10a53f2510c4a1db958a71be31974d30654d5472e624",
+    "zh:32fa31329731db2bf4b7d0f09096416ca146f05b58f4482bbd4ee0f28cefbbcc",
+    "zh:59136b73d3abe7cc5b06d9e12d123ad21298ca86ed49a4060a3cd7c2a28a74a1",
+    "zh:a191f3210773ca25c543a92f2d392b85e6a053d596293655b1f25b33eb843b4c",
+    "zh:b8b6033cf0687eadc1099f11d9fb2ca9429ff40c2d85bd6cb047c0f6bc5d5d8d",
+    "zh:bb7d67ed28aa9b28fc5154161af003383f940b2beda0d4577857cad700f39cd1",
+    "zh:be615288f59327b975532a1999deab60a022e6819fe80e5a32526155210ecbba",
+    "zh:de1e3d5c34eef87eb301e74717754babb6dc8e19e3a964919e1165c5a076a719",
+    "zh:eb8c61b20d8ce2bfff9f735ca8456a0d6368af13aa1f43866f61c70f88cc491c",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/nextcloud/.terraform.lock.hcl b/nextcloud/.terraform.lock.hcl
new file mode 100644
index 0000000..4a078a2
--- /dev/null
+++ b/nextcloud/.terraform.lock.hcl
@@ -0,0 +1,20 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/nextcloud/nextcloud.nomad b/nextcloud/nextcloud.nomad
index 95b1827..1b75b76 100644
--- a/nextcloud/nextcloud.nomad
+++ b/nextcloud/nextcloud.nomad
@@ -67,14 +67,14 @@ job "nextcloud" {
         "traefik.http.routers.nextcloud.entryPoints=websecure",
       ]
     }
-    
+
     task "nextcloud-bootstrap" {
       driver = "docker"
-      
+
       lifecycle {
         hook = "prestart"
         sidecar = false
-      }  
+      }
 
       config {
         image = "mysql:8"
@@ -111,7 +111,7 @@ job "nextcloud" {
         destination = "/var/www/html"
         read_only = false
       }
-      
+
       config {
         image = "nextcloud"
         ports = ["web"]
diff --git a/providers.tf b/providers.tf
index a517497..f454d1c 100644
--- a/providers.tf
+++ b/providers.tf
@@ -11,28 +11,28 @@ data "consul_service" "nomad" {
 # Get Vault client from Consul
 data "consul_service" "vault" {
   name = "vault"
-  tag = "active"
+  tag  = "active"
 }
 
 locals {
   # Get Nomad address from Consul
-  nomad_node = data.consul_service.nomad.service[0]
+  nomad_node         = data.consul_service.nomad.service[0]
   nomad_node_address = "http://${local.nomad_node.node_address}:${local.nomad_node.port}"
 
   # Get Vault address from Consul
-  vault_node = data.consul_service.vault.service[0]
+  vault_node         = data.consul_service.vault.service[0]
   vault_node_address = "http://${local.vault_node.node_address}:${local.vault_node.port}"
 }
 
 # Configure the Nomad provider
 provider "nomad" {
-  address = local.nomad_node_address
+  address   = local.nomad_node_address
   secret_id = var.nomad_secret_id
-  region  = "global"
+  region    = "global"
 }
 
 # Configure the Vault provider
 provider "vault" {
   address = local.vault_node_address
-  token = var.vault_token
+  token   = var.vault_token
 }
diff --git a/redis/.terraform.lock.hcl b/redis/.terraform.lock.hcl
new file mode 100644
index 0000000..027dbaa
--- /dev/null
+++ b/redis/.terraform.lock.hcl
@@ -0,0 +1,38 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/consul" {
+  version = "2.15.0"
+  hashes = [
+    "h1:o+Su3YqeOkHgf86GEArIVDZfaZQphYFjAOwpi/b0bzs=",
+    "zh:0bd2a9873099d89bd52e9eee623dd20ccb275d1e2f750da229a53a4d5b23450c",
+    "zh:1c9f87d4d97b2c61d006c0bef159d61d2a661a103025f8276ebbeb000129f931",
+    "zh:25b73a34115255c464be10a53f2510c4a1db958a71be31974d30654d5472e624",
+    "zh:32fa31329731db2bf4b7d0f09096416ca146f05b58f4482bbd4ee0f28cefbbcc",
+    "zh:59136b73d3abe7cc5b06d9e12d123ad21298ca86ed49a4060a3cd7c2a28a74a1",
+    "zh:a191f3210773ca25c543a92f2d392b85e6a053d596293655b1f25b33eb843b4c",
+    "zh:b8b6033cf0687eadc1099f11d9fb2ca9429ff40c2d85bd6cb047c0f6bc5d5d8d",
+    "zh:bb7d67ed28aa9b28fc5154161af003383f940b2beda0d4577857cad700f39cd1",
+    "zh:be615288f59327b975532a1999deab60a022e6819fe80e5a32526155210ecbba",
+    "zh:de1e3d5c34eef87eb301e74717754babb6dc8e19e3a964919e1165c5a076a719",
+    "zh:eb8c61b20d8ce2bfff9f735ca8456a0d6368af13aa1f43866f61c70f88cc491c",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/services.tf b/services.tf
index 1e932a9..6704249 100644
--- a/services.tf
+++ b/services.tf
@@ -10,14 +10,14 @@ module "blocky" {
   source = "./blocky"
 
   base_hostname = var.base_hostname
-  depends_on = [module.mysql-server, module.redis]
+  depends_on    = [module.mysql-server, module.redis]
 }
 
 module "traefik" {
   source = "./traefik"
 
   consul_address = var.consul_address
-  base_hostname = var.base_hostname
+  base_hostname  = var.base_hostname
 }
 
 module "metrics" {
diff --git a/traefik/.terraform.lock.hcl b/traefik/.terraform.lock.hcl
new file mode 100644
index 0000000..027dbaa
--- /dev/null
+++ b/traefik/.terraform.lock.hcl
@@ -0,0 +1,38 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/consul" {
+  version = "2.15.0"
+  hashes = [
+    "h1:o+Su3YqeOkHgf86GEArIVDZfaZQphYFjAOwpi/b0bzs=",
+    "zh:0bd2a9873099d89bd52e9eee623dd20ccb275d1e2f750da229a53a4d5b23450c",
+    "zh:1c9f87d4d97b2c61d006c0bef159d61d2a661a103025f8276ebbeb000129f931",
+    "zh:25b73a34115255c464be10a53f2510c4a1db958a71be31974d30654d5472e624",
+    "zh:32fa31329731db2bf4b7d0f09096416ca146f05b58f4482bbd4ee0f28cefbbcc",
+    "zh:59136b73d3abe7cc5b06d9e12d123ad21298ca86ed49a4060a3cd7c2a28a74a1",
+    "zh:a191f3210773ca25c543a92f2d392b85e6a053d596293655b1f25b33eb843b4c",
+    "zh:b8b6033cf0687eadc1099f11d9fb2ca9429ff40c2d85bd6cb047c0f6bc5d5d8d",
+    "zh:bb7d67ed28aa9b28fc5154161af003383f940b2beda0d4577857cad700f39cd1",
+    "zh:be615288f59327b975532a1999deab60a022e6819fe80e5a32526155210ecbba",
+    "zh:de1e3d5c34eef87eb301e74717754babb6dc8e19e3a964919e1165c5a076a719",
+    "zh:eb8c61b20d8ce2bfff9f735ca8456a0d6368af13aa1f43866f61c70f88cc491c",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version = "1.4.16"
+  hashes = [
+    "h1:tyfjD/maKzb0RxxD9KWgLnkJu9lnYziYsQgGw85Giz8=",
+    "zh:0d4fbb7030d9caac3b123e60afa44f50c83cc2a983e1866aec7f30414abe7b0e",
+    "zh:0db080228e07c72d6d8ca8c45249d6f97cd0189fce82a77abbdcd49a52e57572",
+    "zh:0df88393271078533a217654b96f0672c60eb59570d72e6aefcb839eea87a7a0",
+    "zh:2883b335bb6044b0db6a00e602d6926c047c7f330294a73a90d089f98b24d084",
+    "zh:390158d928009a041b3a182bdd82376b50530805ae92be2b84ed7c3b0fa902a0",
+    "zh:7169b8f8df4b8e9659c49043848fd5f7f8473d0471f67815e8b04980f827f5ef",
+    "zh:9417ee1383b1edd137024882d7035be4dca51fb4f725ca00ed87729086ec1755",
+    "zh:a22910b5a29eeab5610350700b4899267c1b09b66cf21f7e4d06afc61d425800",
+    "zh:a6185c9cd7aa458cd81861058ba568b6411fbac344373a20155e20256f4a7557",
+    "zh:b6260ca9f034df1b47905b4e2a9c33b67dbf77224a694d5b10fb09ae92ffad4c",
+    "zh:d87c12a6a7768f2b6c2a59495c7dc00f9ecc52b1b868331d4c284f791e278a1e",
+  ]
+}
diff --git a/traefik/traefik.tf b/traefik/traefik.tf
index db695d2..3d7b8a8 100644
--- a/traefik/traefik.tf
+++ b/traefik/traefik.tf
@@ -1,11 +1,11 @@
 variable "base_hostname" {
-  type = string
+  type        = string
   description = "Base hostname to serve content from"
-  default = "dev.homelab"
+  default     = "dev.homelab"
 }
 
 variable "consul_address" {
-  type = string
+  type        = string
   description = "address of consul server for dynamic routes"
 }
 
@@ -21,10 +21,9 @@ resource "nomad_job" "traefik" {
     vars = {
       # "consul_address" = "${var.consul_address}",
       "consul_address" = "http://${data.consul_nodes.all-nodes.nodes[0].address}:8500",
-      "base_hostname" = "${var.base_hostname}",
+      "base_hostname"  = "${var.base_hostname}",
     }
   }
 
   jobspec = file("${path.module}/traefik.nomad")
 }
-
diff --git a/vars.tf b/vars.tf
index 863ba37..77ba124 100644
--- a/vars.tf
+++ b/vars.tf
@@ -4,20 +4,20 @@ variable "consul_address" {
 }
 
 variable "base_hostname" {
-  type = string
+  type        = string
   description = "Base hostname to serve content from"
-  default = "dev.homelab"
+  default     = "dev.homelab"
 }
 
 variable "nomad_secret_id" {
-  type = string
+  type        = string
   description = "Secret ID for ACL bootstrapped Nomad"
-  sensitive = true
-  default = ""
+  sensitive   = true
+  default     = ""
 }
 
 variable "vault_token" {
-  type = string
+  type      = string
   sensitive = true
-  default = ""
+  default   = ""
 }