diff options
Diffstat (limited to 'jobs')
-rw-r--r-- | jobs/besiktn.ing/besiktn.ing.nomad.hcl | 64 | ||||
-rw-r--r-- | jobs/besiktn.ing/index.html | 20 | ||||
-rw-r--r-- | jobs/faeltkullen.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/files.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/försäkr.ing/försäkr.ing.nomad.hcl | 64 | ||||
-rw-r--r-- | jobs/försäkr.ing/index.html | 21 | ||||
-rw-r--r-- | jobs/homepage/homepage.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/raytracer.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/rr.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/srg/srg.nomad.hcl | 1 | ||||
-rw-r--r-- | jobs/traefik.nomad.hcl | 45 | ||||
-rw-r--r-- | jobs/vaultwarden.nomad.hcl | 62 |
12 files changed, 22 insertions, 260 deletions
diff --git a/jobs/besiktn.ing/besiktn.ing.nomad.hcl b/jobs/besiktn.ing/besiktn.ing.nomad.hcl deleted file mode 100644 index ace4d1a..0000000 --- a/jobs/besiktn.ing/besiktn.ing.nomad.hcl +++ /dev/null @@ -1,64 +0,0 @@ -job "besiktn.ing" { - group "web" { - count = 1 - - network { - port "http" { - to = 80 - } - } - - service { - name = "besiktning" - port = "http" - provider = "nomad" - - tags = [ - "traefik.enable=true", - "traefik.http.routers.besiktning.rule=Host(`besiktn.ing`)||Host(`www.besiktn.ing`)", - "traefik.http.routers.besiktning.entrypoints=https", - "traefik.http.routers.besiktning.tls.certresolver=default", - ] - } - - task "web" { - driver = "docker" - - resources { - cpu = 50 - memory = 20 - } - - config { - image = "nginx:1.25-alpine" - ports = ["http"] - - volumes = [ - "local/config:/etc/nginx/conf.d", - "local/html:/var/www/html", - ] - } - - template { - data = <<EOF -server { - listen 80 default_server; - listen [::]:80 default_server; - http2 on; - - root /var/www/html; - location / { - index index.html; - } -} -EOF - destination = "local/config/website.conf" - } - - template { - data = file("jobs/besiktn.ing/index.html") - destination = "local/html/index.html" - } - } - } -} diff --git a/jobs/besiktn.ing/index.html b/jobs/besiktn.ing/index.html deleted file mode 100644 index 441c3e9..0000000 --- a/jobs/besiktn.ing/index.html +++ /dev/null @@ -1,20 +0,0 @@ -<!DOCTYPE html> -<html lang="sv"> -<head> - <meta charset="UTF-8"> - <meta http-equiv="X-UA-Compatible" content="IE=edge"> - <meta name="viewport" content="width=device-width, initial-scale=1.0"> - <title>Besiktn.ing</title> - <style> -body { - text-align: center; - padding-top: 20vh; - font-family: sans-serif; -} - </style> -</head> -<body> - <h1>Besikta biljäveln</h1> - <p>annars får du inte köra fanskapet</p> -</body> -</html> diff --git a/jobs/faeltkullen.nomad.hcl b/jobs/faeltkullen.nomad.hcl index 2cfbd55..a5065fe 100644 --- a/jobs/faeltkullen.nomad.hcl +++ b/jobs/faeltkullen.nomad.hcl @@ -20,7 +20,6 @@ job "faeltkullen" { tags = [ "traefik.enable=true", "traefik.http.routers.faeltkullen.rule=Host(`xn--fltkullen-v2a.magnusson.space`)||Host(`www.xn--fltkullen-v2a.magnusson.space`)", - "traefik.http.routers.faeltkullen.entrypoints=https", "traefik.http.routers.faeltkullen.tls.certresolver=default", ] } diff --git a/jobs/files.nomad.hcl b/jobs/files.nomad.hcl index 28fa3a5..2bb2b00 100644 --- a/jobs/files.nomad.hcl +++ b/jobs/files.nomad.hcl @@ -20,7 +20,6 @@ job "files" { tags = [ "traefik.enable=true", "traefik.http.routers.files.rule=Host(`files.magnusson.space`)", - "traefik.http.routers.files.entrypoints=https", "traefik.http.routers.files.tls.certresolver=default", ] } diff --git a/jobs/försäkr.ing/försäkr.ing.nomad.hcl b/jobs/försäkr.ing/försäkr.ing.nomad.hcl deleted file mode 100644 index 0b0a7db..0000000 --- a/jobs/försäkr.ing/försäkr.ing.nomad.hcl +++ /dev/null @@ -1,64 +0,0 @@ -job "försäkr.ing" { - group "web" { - count = 1 - - network { - port "http" { - to = 80 - } - } - - service { - name = "forsakring" - port = "http" - provider = "nomad" - - tags = [ - "traefik.enable=true", - "traefik.http.routers.forsakring.rule=Host(`xn--frskr-ira7j.ing`)||Host(`www.xn--frskr-ira7j.ing`)", - "traefik.http.routers.forsakring.entrypoints=https", - "traefik.http.routers.forsakring.tls.certresolver=default", - ] - } - - task "web" { - driver = "docker" - - resources { - cpu = 50 - memory = 20 - } - - config { - image = "nginx:1.25-alpine" - ports = ["http"] - - volumes = [ - "local/config:/etc/nginx/conf.d", - "local/html:/var/www/html", - ] - } - - template { - data = <<EOF -server { - listen 80 default_server; - listen [::]:80 default_server; - http2 on; - - root /var/www/html; - location / { - index index.html; - } -} -EOF - destination = "local/config/website.conf" - } - - template { - data = file("jobs/försäkr.ing/index.html") - destination = "local/html/index.html" - } - } - } -} diff --git a/jobs/försäkr.ing/index.html b/jobs/försäkr.ing/index.html deleted file mode 100644 index 86e06fd..0000000 --- a/jobs/försäkr.ing/index.html +++ /dev/null @@ -1,21 +0,0 @@ -<!DOCTYPE html> -<html lang="sv"> -<head> - <meta charset="UTF-8"> - <meta http-equiv="X-UA-Compatible" content="IE=edge"> - <meta name="viewport" content="width=device-width, initial-scale=1.0"> - <title>Försäkr.ing</title> - <style> -body { - text-align: center; - padding-top: 20vh; - font-family: sans-serif; -} - </style> -</head> -<body> - <h1>Försäkra biljäveln</h1> - <p>annars får du inte köra fanskapet</p> - <p>(gäller även andra saker)</p> -</body> -</html> diff --git a/jobs/homepage/homepage.nomad.hcl b/jobs/homepage/homepage.nomad.hcl index 57be8fd..dc1be71 100644 --- a/jobs/homepage/homepage.nomad.hcl +++ b/jobs/homepage/homepage.nomad.hcl @@ -16,7 +16,6 @@ job "homepage" { tags = [ "traefik.enable=true", "traefik.http.routers.homepage.rule=Host(`magnusson.space`)||Host(`www.magnusson.space`)", - "traefik.http.routers.homepage.entrypoints=https", "traefik.http.routers.homepage.tls.certresolver=default", ] } diff --git a/jobs/raytracer.nomad.hcl b/jobs/raytracer.nomad.hcl index 4642a8b..4a528e5 100644 --- a/jobs/raytracer.nomad.hcl +++ b/jobs/raytracer.nomad.hcl @@ -20,7 +20,6 @@ job "raytracer" { tags = [ "traefik.enable=true", "traefik.http.routers.raytracer.rule=Host(`raytracer.magnusson.space`)", - "traefik.http.routers.raytracer.entrypoints=https", "traefik.http.routers.raytracer.tls.certresolver=default", ] } diff --git a/jobs/rr.nomad.hcl b/jobs/rr.nomad.hcl index 4796b27..9c00e3b 100644 --- a/jobs/rr.nomad.hcl +++ b/jobs/rr.nomad.hcl @@ -20,7 +20,6 @@ job "rr" { tags = [ "traefik.enable=true", "traefik.http.routers.rr.rule=Host(`rr.magnusson.space`)", - "traefik.http.routers.rr.entrypoints=https", "traefik.http.routers.rr.tls.certresolver=default", ] } diff --git a/jobs/srg/srg.nomad.hcl b/jobs/srg/srg.nomad.hcl index 29d2374..535258f 100644 --- a/jobs/srg/srg.nomad.hcl +++ b/jobs/srg/srg.nomad.hcl @@ -16,7 +16,6 @@ job "srg" { tags = [ "traefik.enable=true", "traefik.http.routers.srg.rule=Host(`xn--srskildakommandorrelsegruppen-0pc88c.se`)||Host(`www.xn--srskildakommandorrelsegruppen-0pc88c.se`)", - "traefik.http.routers.srg.entrypoints=https", "traefik.http.routers.srg.tls.certresolver=default", ] } diff --git a/jobs/traefik.nomad.hcl b/jobs/traefik.nomad.hcl index 1107117..e399ef2 100644 --- a/jobs/traefik.nomad.hcl +++ b/jobs/traefik.nomad.hcl @@ -41,23 +41,23 @@ job "traefik" { template { data = <<EOF -----BEGIN CERTIFICATE----- -MIIDDTCCArKgAwIBAgIRAIYjjhWbJ80SG4cXZF6bGVIwCgYIKoZIzj0EAwIwgcgx -CzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNj -bzEaMBgGA1UECRMRMTAxIFNlY29uZCBTdHJlZXQxDjAMBgNVBBETBTk0MTA1MRcw -FQYDVQQKEw5IYXNoaUNvcnAgSW5jLjEOMAwGA1UECxMFTm9tYWQxPzA9BgNVBAMT -Nk5vbWFkIEFnZW50IENBIDE3ODMwMTE2MzYzOTIwMDg3MDMyMTI4NzQyMTA5ODEy -MTE3MzMzMDAeFw0yMzA4MjAyMDE0MzdaFw0yODA4MTgyMDE0MzdaMIHIMQswCQYD -VQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGjAY -BgNVBAkTETEwMSBTZWNvbmQgU3RyZWV0MQ4wDAYDVQQREwU5NDEwNTEXMBUGA1UE -ChMOSGFzaGlDb3JwIEluYy4xDjAMBgNVBAsTBU5vbWFkMT8wPQYDVQQDEzZOb21h -ZCBBZ2VudCBDQSAxNzgzMDExNjM2MzkyMDA4NzAzMjEyODc0MjEwOTgxMjExNzMz -MzAwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQnSx/6sQkxGuL9kaDAyUGoqWYJ -bAzrBrhyNLMkjjYXQ7QrzSOIzGfUGj2A4AzpHbU0t9k+JKaVHaKevcPVFyLMo3sw -eTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zApBgNVHQ4EIgQgqgrh -OUp/Z5bL0pf20U6mGO57+PdAU88f3U6MbvYPaqMwKwYDVR0jBCQwIoAgqgrhOUp/ -Z5bL0pf20U6mGO57+PdAU88f3U6MbvYPaqMwCgYIKoZIzj0EAwIDSQAwRgIhAOuN -l6lMSJW7er6SN22jKxR+oxrk9755eKm0b4GCDscCAiEAjlyxJnwTSF1v23cCS4c+ -V435uuYooblwdUaga7fTDkE= +MIIDCzCCArGgAwIBAgIQbot0jxQHoG8s73hr191WtDAKBggqhkjOPQQDAjCByDEL +MAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2Nv +MRowGAYDVQQJExExMDEgU2Vjb25kIFN0cmVldDEOMAwGA1UEERMFOTQxMDUxFzAV +BgNVBAoTDkhhc2hpQ29ycCBJbmMuMQ4wDAYDVQQLEwVOb21hZDE/MD0GA1UEAxM2 +Tm9tYWQgQWdlbnQgQ0EgMTQ2OTM5MTcyODk1MDE3MjcwNDk5OTgxOTYzNTQzOTI3 +Njc0NTQ4MB4XDTI1MDMwNTE2MjY1OFoXDTMwMDMwNDE2MjY1OFowgcgxCzAJBgNV +BAYTAlVTMQswCQYDVQQIEwJDQTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEaMBgG +A1UECRMRMTAxIFNlY29uZCBTdHJlZXQxDjAMBgNVBBETBTk0MTA1MRcwFQYDVQQK +Ew5IYXNoaUNvcnAgSW5jLjEOMAwGA1UECxMFTm9tYWQxPzA9BgNVBAMTNk5vbWFk +IEFnZW50IENBIDE0NjkzOTE3Mjg5NTAxNzI3MDQ5OTk4MTk2MzU0MzkyNzY3NDU0 +ODBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABIiynXPFpPbn1ybdwlHscUXMKC+C +CHNImr+HdySSAMrzKxglug6TBxyTGG3Xx41xCaBIvKjij9ayUMi1VgXEa7CjezB5 +MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MCkGA1UdDgQiBCCGQHlJ +Jq7rUsjrK8nFttoCV25j687nsTAHRt0eGfK84zArBgNVHSMEJDAigCCGQHlJJq7r +UsjrK8nFttoCV25j687nsTAHRt0eGfK84zAKBggqhkjOPQQDAgNIADBFAiBPQ2vM +Fc0v5ctHR9f6cOHP2gIvYzIuYcBMq09TybzjrAIhAPgUAib3h9HA83SsoSa0PM8S +ZRHZBs9a7IewBXeVqgL8 -----END CERTIFICATE----- EOF destination = "local/nomad-agent-ca.pem" @@ -66,14 +66,15 @@ EOF template { data = <<EOF [entryPoints] - [entryPoints.http] + [entryPoints.httpredirect] address = ":80" - [entryPoints.http.http.redirections.entryPoint] - to = "https" + [entryPoints.httpredirect.http.redirections.entryPoint] + to = "web" scheme = "https" permanent = "true" - [entryPoints.https] + [entryPoints.web] address = ":443" + asDefault = true [accessLog] [log] @@ -116,13 +117,11 @@ http: - auth tls: certResolver: default - entrypoints: https ctftajm: rule: Host(`ctftajm.se`)||Host(`www.ctftajm.se`) service: ctftajm tls: certResolver: default - entrypoints: https middlewares: auth: basicAuth: diff --git a/jobs/vaultwarden.nomad.hcl b/jobs/vaultwarden.nomad.hcl deleted file mode 100644 index f42b195..0000000 --- a/jobs/vaultwarden.nomad.hcl +++ /dev/null @@ -1,62 +0,0 @@ -job "vaultwarden" { - group "vaultwarden" { - count = 1 - - network { - port "http" { - to = 80 - } - } - - service { - name = "vaultwarden-web" - port = "http" - provider = "nomad" - - tags = [ - "traefik.enable=true", - "traefik.http.routers.vaultwarden.rule=Host(`vaultwarden.magnusson.space`)", - "traefik.http.routers.vaultwarden.entrypoints=https", - "traefik.http.routers.vaultwarden.tls.certresolver=default", - ] - } - - volume "vaultwarden" { - type = "host" - source = "vaultwarden" - } - - task "vaultwarden" { - driver = "docker" - - resources { - cpu = 100 - memory = 150 - } - - volume_mount { - volume = "vaultwarden" - destination = "/data" - } - - config { - image = "vaultwarden/server:1.32.0-alpine" - ports = ["http"] - } - - template { - data = <<EOF -SIGNUPS_ALLOWED=false -DOMAIN=https://vaultwarden.magnusson.space -PUSH_ENABLED=true -{{ with nomadVar "nomad/jobs/vaultwarden" }} -PUSH_INSTALLATION_ID={{ .installation_id }} -PUSH_INSTALLATION_KEY={{ .installation_key }} -{{ end }} -EOF - destination = "local/.env" - env = true - } - } - } -} |