resource "nomad_job" "traefik" {
  jobspec = file("${path.module}/traefik.nomad")
}

resource "nomad_acl_policy" "treafik_secrets_certs_read" {
  name        = "traefik-secrets-certs-read"
  description = "Read certs to secrets store"
  rules_hcl   = <<EOH
namespace "default" {
  variables {
    path "secrets/certs/*" {
      capabilities = ["read"]
    }
    path "secrets/certs" {
      capabilities = ["read"]
    }
  }
}
EOH
  job_acl {
    job_id = resource.nomad_job.traefik.id
  }
}