From da88e5835513b574d72dc8ab9c49f96db095d210 Mon Sep 17 00:00:00 2001
From: Mathias Magnusson <mathias@magnusson.space>
Date: Sun, 26 May 2024 16:23:00 +0200
Subject: [PATCH] Deploy to nomad with the github action

---
 .github/workflows/deploy.yml | 12 +++----
 job.nomad.hcl                | 61 ++++++++++++++++++++++++++++++++++++
 2 files changed, 67 insertions(+), 6 deletions(-)
 create mode 100644 job.nomad.hcl

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 77ed0a2..62eb6d5 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -46,9 +46,9 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
-      # - name: Deploy to nomad
-      #   env:
-      #     NOMAD_ADDR: ${{ vars.NOMAD_ADDR }}
-      #     NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
-      #   run: |
-      #     nomad run -var=image_tag=${{ env.current }} job.nomad.hcl
+      - name: Deploy to nomad
+        env:
+          NOMAD_ADDR: ${{ vars.NOMAD_ADDR }}
+          NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
+        run: |
+          nomad run -var=image_tag=${{ env.current }} job.nomad.hcl
diff --git a/job.nomad.hcl b/job.nomad.hcl
new file mode 100644
index 0000000..0bc838a
--- /dev/null
+++ b/job.nomad.hcl
@@ -0,0 +1,61 @@
+job "calypso" {
+  type = "service"
+
+  group "bawang" {
+    network {
+      port "http" { }
+    }
+
+    service {
+      name     = "calypso"
+      port     = "http"
+      provider = "nomad"
+      tags = [
+        "traefik-external.enable=true",
+        "traefik-external.http.routers.calypso.rule=Host(`calypso.datasektionen.se`)",
+        "traefik-external.http.routers.calypso.entrypoints=websecure",
+        "traefik-external.http.routers.calypso.tls.certresolver=default",
+
+        "traefik-internal.enable=true",
+        "traefik-internal.http.routers.calypso.rule=Host(`calypso.nomad.dsekt.internal`)",
+      ]
+    }
+
+    task "calypso" {
+      driver = "docker"
+
+      config {
+        image = var.image_tag
+        ports = ["http"]
+      }
+
+      template {
+        data        = <<ENV
+{{ with nomadVar "nomad/jobs/calypso" }}
+LOGIN_KEY={{ .login_api_key }}
+JDBC_DATABASE_PASSWORD={{ .database_password }}
+{{ end }}
+JDBC_DATABASE_URL=jdbc:postgresql://postgres.dsekt.internal:5432/calypso
+JDBC_DATABASE_USERNAME=calypso
+LOGIN_FRONTEND_URL=https://login.datasektionen.se
+LOGIN_API_URL=https://login.datasektionen.se
+APPLICATION_URL=https://calypso.datasektionen.se
+DARKMODE_URL=https://darkmode.datasektionen.se
+PORT={{ env "NOMAD_PORT_http" }}
+ENV
+        destination = "local/.env"
+        env         = true
+      }
+
+      # My god, that's a lot of RAM! (seems to be using about 250MiB idle at the time of writing)
+      resources {
+        memory = 500
+      }
+    }
+  }
+}
+
+variable "image_tag" {
+  type = string
+  default = "ghcr.io/datasektionen/calypso:latest"
+}