WIP: CEPH

.secrets-baseline

@@ -171,7 +171,7 @@
         "filename": "nomad/syslogng.nomad",
         "hashed_secret": "298b5925fe7c7458cb8a12a74621fdedafea5ad6",
         "is_verified": false,
-        "line_number": 163,
+        "line_number": 170,
         "is_secret": false
       },
       {
@@ -179,7 +179,7 @@
         "filename": "nomad/syslogng.nomad",
         "hashed_secret": "3a1cec2d3c3de7e4da4d99c6731ca696c24b72b4",
         "is_verified": false,
-        "line_number": 163,
+        "line_number": 170,
         "is_secret": false
       }
     ],
@@ -210,5 +210,5 @@
       }
     ]
   },
-  "generated_at": "2022-07-27T03:09:38Z"
+  "generated_at": "2022-09-04T19:36:18Z"
 }

nomad/ansible_hosts.yml

@@ -4,6 +4,7 @@ all:
     servers:
       hosts:
         n1.thefij:
+          cephfs: true
           # consul_node_role: bootstrap
           nomad_node_role: both
           nomad_unique_host_volumes:
@@ -20,6 +21,7 @@ all:
               mode: "0755"
               read_only: false
         n2.thefij:
+          cephfs: true
           nomad_node_role: both
           nomad_unique_host_volumes:
             - name: nextcloud-data
@@ -41,6 +43,7 @@ all:
               mode: "0755"
               read_only: false
         n3.thefij:
+          cephfs: true
           nomad_node_class: ingress
           nomad_node_role: both
         pi4:

nomad/setup-cluster.yml

@@ -243,6 +243,12 @@
         state: mounted
         fstype: nfs4
 
+    - name: Enable cephfs support
+      modprobe:
+        name: rbd
+        state: present
+        when: cephfs
+
 - name: Install Docker
   hosts: nomad_instances
   become: true

nomad/storage_plugins/ceph.nomad

@@ -0,0 +1,9 @@
+job {
+
+  # Don't run on Raspberry Pi because kernel mod is not present
+  constraint {
+    attribute = "${attr.kernel.version}"
+    operator = "regexp"
+    value = "(?!-raspi)"
+  }
+}

nomad/syslogng.nomad

@@ -128,6 +128,13 @@ EOF
           }
         }
       }
+
+      tags = [
+        "traefik.enable=true",
+        "traefik.tcp.routers.syslogngtcp.entrypoints=syslogtcp",
+        "traefik.tcp.routers.syslogngtcp.rule=HostSNI(`*`)",
+        "traefik.udp.routers.syslogngudp.entrypoints=syslogudp",
+      ]
     }
 
     task "syslogng" {

nomad/traefik/traefik.nomad

@@ -120,6 +120,12 @@ job "traefik" {
   [entryPoints.metrics]
     address = ":8989"
 
+  [entryPoints.syslogtcp]
+    address = ":514"
+
+  [entryPoints.syslogudp]
+    address = ":514/udp"
+
 [api]
   dashboard = true