diff --git a/nomad/vaultwarden/service.nomad b/nomad/vaultwarden/service.nomad new file mode 100644 index 0000000..74285b9 --- /dev/null +++ b/nomad/vaultwarden/service.nomad @@ -0,0 +1,83 @@ +job "vaultwarden" { + type = "service" + datacenters = ["dc1"] + + group "service" { + network { + port "web" { to = 80 } + } + + service { + name = "pass" + port = "web" + } + + volume "storage" { + type = "csi" + source = "vaultwarden" + read_only = false + attachment_mode = "file-system" + access_mode = "multi-node-multi-writer" + } + update { + max_parallel = 0 + } + + + task "image" { + driver = "docker" + + config { + image = "registry.lab.bltavares.com/vaultwarden/server" + ports = ["web"] + init = true + } + + volume_mount { + volume = "storage" + destination = "/data" + } + + service { + check { + name = "Service Check" + type = "http" + path = "/alive" + port = "web" + interval = "30s" + timeout = "30s" + } + + check_restart { + limit = 3 + grace = "90s" + ignore_warnings = false + } + } + + env { + SIGNUPS_ALLOWED = false + + ## For U2F to work, the server must use HTTPS + DOMAIN = "https://pass.lab.bltavares.com" + + } + user = "1000:1000" + + template { + data = <