nomad.tmpl.hcl


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

data_dir  = "/opt/nomad/data"
bind_addr = "0.0.0.0"

advertise {
  http = "{{ ip address }}"
  rpc  = "{{ ip address }}"
  serf = "{{ ip address }}"
}

server {
  enabled          = true
  bootstrap_expect = 1

  encrypt = "{{ base64 }}" # why not?
}

client {
  enabled = true
  servers = ["{{ ip address }}"]

  host_volume "ca-certificates" {
    path = "/var/local/ca-certificates"
  }

  host_volume "static-files" {
    path = "/var/www/files"
  }

  host_volume "faktura-settings" {
    path = "/var/www/faktura"
  }

  host_volume "ctftajm-postgres" {
    path = "/var/local/ctftajm-postgres"
  }

  host_volume "vaultwarden" {
    path = "/var/local/vaultwarden"
  }
}

acl {
  enabled = true
}

tls {
  http = true
  rpc  = true

  verify_https_client = false

  ca_file = "/etc/nomad.d/nomad-agent-ca.pem"
  cert_file = "/etc/nomad.d/global-server-nomad.pem"
  key_file = "/etc/nomad.d/global-server-nomad-key.pem"
}