Deploy to nomad with the github action

datasektionen · May 26, 2024 · da88e58 · da88e58
1 parent a2f32ed
commit da88e58
Show file tree

Hide file tree

Showing 2 changed files with 67 additions and 6 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -46,9 +46,9 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
-      # - name: Deploy to nomad
-      #   env:
-      #     NOMAD_ADDR: ${{ vars.NOMAD_ADDR }}
-      #     NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
-      #   run: |
-      #     nomad run -var=image_tag=${{ env.current }} job.nomad.hcl
+      - name: Deploy to nomad
+        env:
+          NOMAD_ADDR: ${{ vars.NOMAD_ADDR }}
+          NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
+        run: |
+          nomad run -var=image_tag=${{ env.current }} job.nomad.hcl
diff --git a/job.nomad.hcl b/job.nomad.hcl
@@ -0,0 +1,61 @@
+job "calypso" {
+  type = "service"
+
+  group "bawang" {
+    network {
+      port "http" { }
+    }
+
+    service {
+      name     = "calypso"
+      port     = "http"
+      provider = "nomad"
+      tags = [
+        "traefik-external.enable=true",
+        "traefik-external.http.routers.calypso.rule=Host(`calypso.datasektionen.se`)",
+        "traefik-external.http.routers.calypso.entrypoints=websecure",
+        "traefik-external.http.routers.calypso.tls.certresolver=default",
+
+        "traefik-internal.enable=true",
+        "traefik-internal.http.routers.calypso.rule=Host(`calypso.nomad.dsekt.internal`)",
+      ]
+    }
+
+    task "calypso" {
+      driver = "docker"
+
+      config {
+        image = var.image_tag
+        ports = ["http"]
+      }
+
+      template {
+        data        = <<ENV
+{{ with nomadVar "nomad/jobs/calypso" }}
+LOGIN_KEY={{ .login_api_key }}
+JDBC_DATABASE_PASSWORD={{ .database_password }}
+{{ end }}
+JDBC_DATABASE_URL=jdbc:postgresql://postgres.dsekt.internal:5432/calypso
+JDBC_DATABASE_USERNAME=calypso
+LOGIN_FRONTEND_URL=https://login.datasektionen.se
+LOGIN_API_URL=https://login.datasektionen.se
+APPLICATION_URL=https://calypso.datasektionen.se
+DARKMODE_URL=https://darkmode.datasektionen.se
+PORT={{ env "NOMAD_PORT_http" }}
+ENV
+        destination = "local/.env"
+        env         = true
+      }
+
+      # My god, that's a lot of RAM! (seems to be using about 250MiB idle at the time of writing)
+      resources {
+        memory = 500
+      }
+    }
+  }
+}
+
+variable "image_tag" {
+  type = string
+  default = "ghcr.io/datasektionen/calypso:latest"
+}