homelab-nomad/services/main.tf

# module "nextcloud" {
#   source = "./nextcloud"
#
#   depends_on = [module.databases]
# }

module "backups" {
  source = "./backups"

  # In parent module
  # depends_on = [module.databases]
}

resource "nomad_job" "whoami" {
  hcl2 {
    enabled = true
    vars = {
      "count" = 1,
      # "count" = "${2 * length(data.consul_service.nomad.service)}",
    }
  }

  jobspec = file("${path.module}/whoami.nomad")
}

resource "nomad_job" "ipdvr" {
  jobspec = file("${path.module}/ip-dvr.nomad")
}

# resource "consul_config_entry" "sabnzbd_intents" {
#   depends_on = [nomad_job.ipdvr]
#
#   name = "sabnzbd"
#   kind = "service-intentions"
#
#   config_json = jsonencode({
#     Sources = [
#       {
#         Action     = "allow"
#         Name       = "sonarr"
#         Precedence = 9
#         Type       = "consul"
#       },
#     ]
#   })
# }
#
# resource "consul_config_entry" "nzbget_intents" {
#   depends_on = [nomad_job.ipdvr]
#
#   name = "nzbget"
#   kind = "service-intentions"
#
#   config_json = jsonencode({
#     Sources = [
#       {
#         Action     = "allow"
#         Name       = "sonarr"
#         Precedence = 9
#         Type       = "consul"
#       },
#     ]
#   })
# }

module "media-library" {
  source = "./service"

  name         = "media-library"
  image        = "caddy"
  args         = ["caddy", "file-server", "--root", "/mnt/media", "--browse"]
  ingress      = true
  service_port = 80
  host_volumes = [
    {
      name      = "media-read"
      dest      = "/mnt/media"
      read_only = true
    },
  ]
}

module "minitor" {
  source = "./service"

  name              = "minitor"
  image             = "iamthefij/minitor-go:1.1"
  args              = ["-metrics", "-config=$${NOMAD_TASK_DIR}/config.yml"]
  service_port      = 8080
  metrics_port_name = "main"

  templates = [
    {
      data        = <<EOF
      {{ with nomadVar "nomad/jobs/minitor" -}}
      MAILGUN_API_KEY={{ .mailgun_api_key }}
      {{ end -}}
      EOF
      dest        = "env"
      dest_prefix = "$${NOMAD_SECRETS_DIR}/"
      env         = true
    },
    {
      data            = file("${path.module}/minitor-config.yml")
      left_delimiter  = "[["
      right_delimiter = "]]"
      dest            = "config.yml"
      mount           = false
    },
  ]
}

module "photoprism_module" {
  source = "./service"

  name               = "photoprism"
  image              = "photoprism/photoprism:221118-jammy"
  image_pull_timeout = "10m"
  ingress            = true
  service_port       = 2342
  sticky_disk        = true
  healthcheck_path   = "/library/login"
  env = {
    PHOTOPRISM_DEBUG = true
    # UI
    PHOTOPRISM_SITE_CAPTION     = "AI-Powered Photos App"
    PHOTOPRISM_SITE_DESCRIPTION = "Fijolek home photos"
    PHOTOPRISM_SITE_TITLE       = "PhotoPrism"
    PHOTOPRISM_SITE_URL         = "https://photoprism.thefij.rocks/"
    PHOTOPRISM_SPONSOR          = "true"
    # Worker config
    PHOTOPRISM_WORKERS = 2
    # Paths
    PHOTOPRISM_ORIGINALS_PATH = "/photoprism-media/Library"
    PHOTOPRISM_IMPORT_PATH    = "/photoprism-media/Import"
    PHOTOPRISM_STORAGE_PATH   = "/photoprism-storage" # Storage PATH for generated files like cache and thumbnails
    # Unix permissions
    PHOTOPRISM_UID   = 500
    PHOTOPRISM_GID   = 100
    PHOTOPRISM_UMASK = 0000
  }
  resources = {
    cpu        = 2000
    memory     = 3000
    memory_max = 4000
  }
  use_mysql = true
  use_vault = true
  host_volumes = [
    {
      name      = "photoprism-storage"
      dest      = "/photoprism-storage"
      read_only = false
    },
    {
      name      = "photoprism-media"
      dest      = "/photoprism-media"
      read_only = false
    },
  ]
  mysql_bootstrap = {
    vault_key = "nomad/jobs/photoprism"
  }
  templates = [
    {
      data        = <<EOF
      {{ with nomadVar "nomad/jobs/photoprism" -}}
      PHOTOPRISM_ADMIN_USER={{ .admin_user }}
      PHOTOPRISM_ADMIN_PASSWORD={{ .admin_password }}
      PHOTOPRISM_DATABASE_DRIVER=mysql
      PHOTOPRISM_DATABASE_NAME={{ .db_name }}
      PHOTOPRISM_DATABASE_USER={{ .db_user }}
      PHOTOPRISM_DATABASE_PASSWORD={{ .db_pass }}
      {{ range nomadService 1 (env "NOMAD_ALLOC_ID") "mysql-server" -}}
      PHOTOPRISM_DATABASE_SERVER="{{ .Address }}:{{ .Port }}"
      {{- end }}
      {{- end }}
      EOF
      dest_prefix = "$${NOMAD_SECRETS_DIR}/"
      dest        = "env"
      env         = true
      mount       = false
    },
  ]
}

module "diun" {
  source = "./service"

  name  = "diun"
  image = "crazymax/diun:4.24"
  args  = ["serve", "--log-level=debug"]

  env = {
    DIUN_DB_PATH                        = "$${NOMAD_TASK_DIR}/diun.db"
    DIUN_WATCH_SCHEDULE                 = "0 */6 * * *"
    DIUN_PROVIDERS_NOMAD_WATCHBYDEFAULT = true

    # Nomad API
    NOMAD_ADDR           = "http://$${attr.unique.network.ip-address}:4646/"
    DIUN_PROVIDERS_NOMAD = true
  }

  use_vault = true

  templates = [
    {
      data        = <<EOF
      {{ with nomadVar "nomad/jobs/diun" -}}
      DIUN_NOTIF_SLACK_WEBHOOKURL={{ .slack_hook_url }}
      {{- end }}
      EOF
      dest_prefix = "$${NOMAD_SECRETS_DIR}"
      dest        = "env"
      env         = true
      mount       = false
    },
  ]
}