f5898b0283
Add workload ACL management for mysql and postgres access
...
Allows required jobs to access shared secrets and auto generates psks
for stunnel.
Currently supporting MySQL, Postgres, and LDAP.
2023-08-29 12:48:48 -07:00
2efc7f8c2f
Add ability to set job meta for services
2023-08-24 15:41:18 -07:00
7aa5b800ba
Clean up finally rendered templates for services
2023-08-24 15:37:42 -07:00
d5078b24da
Refactor use of wesher to be behind a variable toggle
...
Occasionally I run into issues with Wesher. This makes it easier to
disable use of Wesher by setting TF_VAR_use_wesher to false.
2023-08-24 12:51:32 -07:00
41c9d3d6f6
Adjust down default service stunnel sidecar resources
...
Keep photoprism and lidarr, database heavy tools, at the same level
2023-08-07 11:31:35 -07:00
0ea9da3a53
Update postgres bootstrap allowing multiple databases
2023-07-25 16:57:33 -07:00
ac29343d96
Add postgres stunnel and service bootstrap
2023-07-25 10:59:33 -07:00
f8478ae6c9
Service Template: Make sure stunnel is there for ldap
2023-07-25 10:30:28 -07:00
f0d31ff13c
Move stunnel psks to a more restrictive path
2023-07-25 10:16:30 -07:00
c33f877af8
Allow specifying port from value for local host binding
2023-07-24 15:23:40 -07:00
b9fb2d4b07
Add ability to specify custom services for service module
2023-07-24 15:23:31 -07:00
d0641f8edf
Enable setting static ports for service template
2023-07-07 16:33:36 -07:00
2b91b6dc8f
Add instance count to service template
2023-07-07 15:51:19 -07:00
0a7ad7a9dc
Enable redis for authelia
...
This also splits redis instances by service
2023-07-07 15:50:23 -07:00
88e91e5e5d
Deploy authelia
...
Backed by lldap and mysql and deployed on whoami for now as a forward
proxy example
Would be good to add oidc for Nomad as well as make policies configurable
via Nomad variables.
2023-07-06 18:00:06 -07:00
a90b3bbdbe
Make it easier to enable bootstrap now that key isn't included
2023-07-06 17:25:13 -07:00
cdbd6a9cb3
Add ability to set priority for service templates
2023-07-06 17:25:13 -07:00
8650ab973a
Add stunnel for ldap as part of service template
2023-07-06 17:25:13 -07:00
f11fad30a5
Use stunnel for mysql
...
Doesn't remove wesher or normal mysql service
2023-05-09 13:20:36 -07:00
27fd60d84d
Add missing service to Wesher
...
Promtail, Backups, service module
2023-05-02 21:14:36 -07:00
f75d149f32
Add constraints and docker devices to service template
2023-04-20 16:47:07 -07:00
08d0e93638
Clean up and remove some consul and vault stuff
2023-03-24 22:58:44 -07:00
98ea2a1ca0
A whole lot of incremental fixes for nomad variables and such
...
Also adds stunnel between redis and clients
2023-03-24 16:32:37 -07:00
d8307935f5
Refactor everything for nomad vars
2023-03-24 11:24:36 -07:00
5228e7c7fb
Export envoy metrics for services
2023-03-02 11:00:30 -08:00
882fe7e29c
Some cleanup of service template whitespace
2023-03-02 10:42:33 -08:00
208f90e7bf
Increase memory and max memory for connect proxy for services
2023-02-28 15:57:45 -08:00
9fe63d03d9
Add image_pull_timeout to service template
2023-02-27 11:54:33 -08:00
0a798aa5a7
Add meta tags to service template
2023-01-11 15:40:42 -08:00
17ab7f637f
Add metrics support to service template
2022-11-15 09:04:18 -08:00
a30749f357
Switch services to module based Terraform template from levant
...
This ends up with a better experience in dealing with tfstate for some
services. Not sure why.
2022-11-11 13:47:26 -08:00
