82 lines
1.7 KiB
HCL
82 lines
1.7 KiB
HCL
resource "nomad_job" "traefik" {
|
|
jobspec = file("${path.module}/traefik.nomad")
|
|
}
|
|
|
|
resource "nomad_acl_policy" "treafik_secrets_certs_read" {
|
|
name = "traefik-secrets-certs-read"
|
|
description = "Read certs to secrets store"
|
|
rules_hcl = <<EOH
|
|
namespace "default" {
|
|
variables {
|
|
path "secrets/certs/*" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "secrets/certs" {
|
|
capabilities = ["read"]
|
|
}
|
|
}
|
|
}
|
|
EOH
|
|
job_acl {
|
|
job_id = resource.nomad_job.traefik.id
|
|
}
|
|
}
|
|
|
|
resource "nomad_acl_policy" "traefik_query_jobs" {
|
|
name = "traefik-query-jobs"
|
|
description = "Allow traefik to query jobs"
|
|
rules_hcl = <<EOH
|
|
namespace "default" {
|
|
capabilities = ["list-jobs", "read-job"]
|
|
}
|
|
EOH
|
|
job_acl {
|
|
job_id = resource.nomad_job.traefik.id
|
|
}
|
|
}
|
|
|
|
resource "nomad_acl_policy" "treafik_external" {
|
|
name = "traefik-exernal"
|
|
description = "Read external services"
|
|
rules_hcl = <<EOH
|
|
namespace "default" {
|
|
variables {
|
|
path "traefik_external/*" {
|
|
capabilities = ["read"]
|
|
}
|
|
}
|
|
}
|
|
EOH
|
|
job_acl {
|
|
job_id = "traefik"
|
|
}
|
|
}
|
|
|
|
resource "nomad_variable" "traefik_external_hass" {
|
|
path = "traefik_external/hass"
|
|
items = {
|
|
name = "hass"
|
|
subdomain = "hass",
|
|
url = "http://192.168.3.65:8123"
|
|
}
|
|
}
|
|
|
|
resource "nomad_variable" "traefik_external_plex" {
|
|
path = "traefik_external/plex"
|
|
items = {
|
|
name = "plex"
|
|
subdomain = "plex",
|
|
url = "http://agnosticfront.thefij:32400"
|
|
}
|
|
}
|
|
|
|
resource "nomad_variable" "traefik_external_appdaemon" {
|
|
path = "traefik_external/appdaemon"
|
|
items = {
|
|
name = "appdaemon"
|
|
subdomain = "appdash",
|
|
url = "http://192.168.3.65:5050"
|
|
# path_prefix = "/add"
|
|
}
|
|
}
|