cluster/infrastructure/gitea/nomad.hcl

job "gitea" {
  datacenters = [ "homelab-1" ]
  type = "service"

  constraint {
    attribute = "${attr.unique.hostname}"
    value = "blowhole"
  }

  group "svc" {
    count = 1

    volume "gitea-data" {
      type = "csi"
      source = "gitea-data"
      read_only = false

      attachment_mode = "file-system"
      access_mode     = "single-node-writer"
    }

    volume "gitea-db" {
      type = "csi"
      source = "gitea-db"
      read_only = false

      attachment_mode = "file-system"
      access_mode     = "single-node-writer"
    }

    restart {
      attempts = 5
      delay = "5s"
    }

    network {
      mode = "bridge"
    }

    service {
      name = "gitea"
      port = "3000"
      
      check {
	type = "http"
	address_mode = "alloc"
	path = "/"
	port = "3000"
	interval = "2s"
	timeout = "2s"
      }

      connect {
	sidecar_service {}
      }
    }

    task "app" {
      driver = "docker"

      volume_mount {
	volume = "gitea-data"
	destination = "/data/gitea"
	read_only = false
      }

      config {
	image = "magicrb/gitea:yc5q5q4q4zmih2rr1xjamnzxx7agjz55"

	volumes = [
	  "local/app.ini:/app.ini",
	]
      }

      env {
	USER_UID = "5001"
	USER_GID = "5001"
      }

      resources {
	cpu = 500
	memory = 1024
      }

      vault {
	policies = ["gitea-policy"]
      }

      template {
	data = file("./app.ini.tpl")
	destination = "local/app.ini"
      }
    }

    task "db" {
      driver = "docker"

      volume_mount {
	volume = "gitea-db"
	destination = "/data/mariadb"
	read_only = false
      }

      config {
	image = "mariadb:local"
      }

      env {
	USER_UID = "84"
	USER_GID = "84"
      }

      resources {
	cpu = 500
	memory = 512
      }
    }
  }
}