iamthefij/homelab-nomad
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Move stunnel psks to a more restrictive path

Browse Source
This commit is contained in:
IamTheFij 2023-07-19 10:57:33 -07:00
parent c33f877af8
commit f0d31ff13c
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
services/service/service_template.nomad
View File

@ -312,27 +312,24 @@ PSKsecrets = {{ env "NOMAD_SECRETS_DIR" }}/ldap_stunnel_psk.txt
%{~ if use_mysql } %{~ if use_mysql }
template { template {
# TODO: move psk to nomad/jobs/name/name/stunnel
data = <<EOF data = <<EOF
{{- with nomadVar "nomad/jobs/${name}" }}{{ .mysql_stunnel_psk }}{{ end -}} {{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .mysql_stunnel_psk }}{{ end -}}
EOF EOF
destination = "$${NOMAD_SECRETS_DIR}/mysql_stunnel_psk.txt" destination = "$${NOMAD_SECRETS_DIR}/mysql_stunnel_psk.txt"
} }
%{ endif } %{ endif }
%{~ if use_redis } %{~ if use_redis }
template { template {
# TODO: move psk to nomad/jobs/name/name/stunnel
data = <<EOF data = <<EOF
{{- with nomadVar "nomad/jobs/${name}" }}{{ .redis_stunnel_psk }}{{ end -}} {{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .redis_stunnel_psk }}{{ end -}}
EOF EOF
destination = "$${NOMAD_SECRETS_DIR}/redis_stunnel_psk.txt" destination = "$${NOMAD_SECRETS_DIR}/redis_stunnel_psk.txt"
} }
%{~ endif } %{~ endif }
%{~ if use_ldap } %{~ if use_ldap }
template { template {
# TODO: move psk to nomad/jobs/name/name/stunnel
data = <<EOF data = <<EOF
{{- with nomadVar "nomad/jobs/${name}" }}{{ .ldap_stunnel_psk }}{{ end -}} {{- with nomadVar "nomad/jobs/${name}/${name}/stunnel" }}{{ .ldap_stunnel_psk }}{{ end -}}
EOF EOF
destination = "$${NOMAD_SECRETS_DIR}/ldap_stunnel_psk.txt" destination = "$${NOMAD_SECRETS_DIR}/ldap_stunnel_psk.txt"
} }