From f0d31ff13cdb65b44050e2636927bf39e3b4e4c1 Mon Sep 17 00:00:00 2001
From: Ian Fijolek <ian@iamthefij.com>
Date: Wed, 19 Jul 2023 10:57:33 -0700
Subject: [PATCH] Move stunnel psks to a more restrictive path

---
 services/service/service_template.nomad | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/services/service/service_template.nomad b/services/service/service_template.nomad
index e7970d0..a546ece 100644
--- a/services/service/service_template.nomad
+++ b/services/service/service_template.nomad
@@ -312,27 +312,24 @@ PSKsecrets = {{ env "NOMAD_SECRETS_DIR" }}/ldap_stunnel_psk.txt
 
       %{~ if use_mysql }
       template {
-        # TODO: move psk to nomad/jobs/name/name/stunnel
         data = <<EOF
-{{- with nomadVar "nomad/jobs/${name}" }}{{ .mysql_stunnel_psk }}{{ end -}}
+{{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .mysql_stunnel_psk }}{{ end -}}
 EOF
         destination = "$${NOMAD_SECRETS_DIR}/mysql_stunnel_psk.txt"
       }
       %{ endif }
       %{~ if use_redis }
       template {
-        # TODO: move psk to nomad/jobs/name/name/stunnel
         data = <<EOF
-{{- with nomadVar "nomad/jobs/${name}" }}{{ .redis_stunnel_psk }}{{ end -}}
+{{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .redis_stunnel_psk }}{{ end -}}
 EOF
         destination = "$${NOMAD_SECRETS_DIR}/redis_stunnel_psk.txt"
       }
       %{~ endif }
       %{~ if use_ldap }
       template {
-        # TODO: move psk to nomad/jobs/name/name/stunnel
         data = <<EOF
-{{- with nomadVar "nomad/jobs/${name}" }}{{ .ldap_stunnel_psk }}{{ end -}}
+{{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .ldap_stunnel_psk }}{{ end -}}
 EOF
         destination = "$${NOMAD_SECRETS_DIR}/ldap_stunnel_psk.txt"
       }