171 lines
4.3 KiB
HCL
171 lines
4.3 KiB
HCL
module "backups" {
|
|
source = "./backups"
|
|
}
|
|
|
|
resource "nomad_job" "whoami" {
|
|
hcl2 {
|
|
enabled = true
|
|
vars = {
|
|
"count" = 1,
|
|
}
|
|
}
|
|
|
|
jobspec = file("${path.module}/whoami.nomad")
|
|
}
|
|
|
|
resource "nomad_job" "ipdvr" {
|
|
jobspec = file("${path.module}/ip-dvr.nomad")
|
|
}
|
|
|
|
module "media-library" {
|
|
source = "./service"
|
|
|
|
name = "media-library"
|
|
image = "caddy"
|
|
args = ["caddy", "file-server", "--root", "/mnt/media", "--browse"]
|
|
ingress = true
|
|
service_port = 80
|
|
host_volumes = [
|
|
{
|
|
name = "media-read"
|
|
dest = "/mnt/media"
|
|
read_only = true
|
|
},
|
|
]
|
|
}
|
|
|
|
module "minitor" {
|
|
source = "./service"
|
|
|
|
name = "minitor"
|
|
image = "iamthefij/minitor-go:1.1"
|
|
args = ["-metrics", "-config=$${NOMAD_TASK_DIR}/config.yml"]
|
|
service_port = 8080
|
|
prometheus = true
|
|
|
|
templates = [
|
|
{
|
|
data = <<EOF
|
|
{{ with nomadVar "nomad/jobs/minitor" -}}
|
|
MAILGUN_API_KEY={{ .mailgun_api_key }}
|
|
{{ end -}}
|
|
EOF
|
|
dest = "env"
|
|
dest_prefix = "$${NOMAD_SECRETS_DIR}/"
|
|
env = true
|
|
},
|
|
{
|
|
data = file("${path.module}/minitor-config.yml")
|
|
left_delimiter = "[["
|
|
right_delimiter = "]]"
|
|
dest = "config.yml"
|
|
mount = false
|
|
},
|
|
]
|
|
}
|
|
|
|
module "photoprism_module" {
|
|
source = "./service"
|
|
|
|
name = "photoprism"
|
|
image = "photoprism/photoprism:221118-jammy"
|
|
image_pull_timeout = "10m"
|
|
ingress = true
|
|
service_port = 2342
|
|
sticky_disk = true
|
|
env = {
|
|
PHOTOPRISM_DEBUG = true
|
|
# UI
|
|
PHOTOPRISM_SITE_CAPTION = "AI-Powered Photos App"
|
|
PHOTOPRISM_SITE_DESCRIPTION = "Fijolek home photos"
|
|
PHOTOPRISM_SITE_TITLE = "PhotoPrism"
|
|
PHOTOPRISM_SITE_URL = "https://photoprism.thefij.rocks/"
|
|
PHOTOPRISM_SPONSOR = "true"
|
|
# Worker config
|
|
PHOTOPRISM_WORKERS = 2
|
|
# Paths
|
|
PHOTOPRISM_ORIGINALS_PATH = "/photoprism-media/Library"
|
|
PHOTOPRISM_IMPORT_PATH = "/photoprism-media/Import"
|
|
PHOTOPRISM_STORAGE_PATH = "/photoprism-storage" # Storage PATH for generated files like cache and thumbnails
|
|
# Unix permissions
|
|
PHOTOPRISM_UID = 500
|
|
PHOTOPRISM_GID = 100
|
|
PHOTOPRISM_UMASK = 0000
|
|
}
|
|
resources = {
|
|
cpu = 2000
|
|
memory = 3000
|
|
memory_max = 4000
|
|
}
|
|
host_volumes = [
|
|
{
|
|
name = "photoprism-storage"
|
|
dest = "/photoprism-storage"
|
|
read_only = false
|
|
},
|
|
{
|
|
name = "photoprism-media"
|
|
dest = "/photoprism-media"
|
|
read_only = false
|
|
},
|
|
]
|
|
mysql_bootstrap = {
|
|
vault_key = "nomad/jobs/photoprism"
|
|
}
|
|
templates = [
|
|
{
|
|
data = <<EOF
|
|
{{ with nomadVar "nomad/jobs/photoprism" -}}
|
|
PHOTOPRISM_ADMIN_USER={{ .admin_user }}
|
|
PHOTOPRISM_ADMIN_PASSWORD={{ .admin_password }}
|
|
PHOTOPRISM_DATABASE_DRIVER=mysql
|
|
PHOTOPRISM_DATABASE_NAME={{ .db_name }}
|
|
PHOTOPRISM_DATABASE_USER={{ .db_user }}
|
|
PHOTOPRISM_DATABASE_PASSWORD={{ .db_pass }}
|
|
{{ range nomadService 1 (env "NOMAD_ALLOC_ID") "mysql-server" -}}
|
|
PHOTOPRISM_DATABASE_SERVER="{{ .Address }}:{{ .Port }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
EOF
|
|
dest_prefix = "$${NOMAD_SECRETS_DIR}/"
|
|
dest = "env"
|
|
env = true
|
|
mount = false
|
|
},
|
|
]
|
|
}
|
|
|
|
module "diun" {
|
|
source = "./service"
|
|
|
|
name = "diun"
|
|
image = "crazymax/diun:4.24"
|
|
args = ["serve", "--log-level=debug"]
|
|
|
|
env = {
|
|
DIUN_DB_PATH = "$${NOMAD_TASK_DIR}/diun.db"
|
|
DIUN_WATCH_SCHEDULE = "0 */6 * * *"
|
|
DIUN_PROVIDERS_NOMAD_WATCHBYDEFAULT = true
|
|
|
|
# Nomad API
|
|
# TODO: Use socket in $NOMAD_SECRETS_DIR/api.sock when we can assign workload ACLs with Terraform to
|
|
# allow read access. Will need to update template to allow passing token by env
|
|
NOMAD_ADDR = "http://$${attr.unique.network.ip-address}:4646/"
|
|
DIUN_PROVIDERS_NOMAD = true
|
|
}
|
|
|
|
templates = [
|
|
{
|
|
data = <<EOF
|
|
{{ with nomadVar "nomad/jobs/diun" -}}
|
|
DIUN_NOTIF_SLACK_WEBHOOKURL={{ .slack_hook_url }}
|
|
{{- end }}
|
|
EOF
|
|
dest_prefix = "$${NOMAD_SECRETS_DIR}"
|
|
dest = "env"
|
|
env = true
|
|
mount = false
|
|
},
|
|
]
|
|
}
|