cluster/nomad/regions/homelab-1/matrix.tf

resource "nomad_volume" "matrix-synapse" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-synapse"
  name        = "matrix-synapse"
  external_id = "matrix-synapse"

  capability {
    access_mode = "multi-node-multi-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/synapse"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "nomad_volume" "matrix-postgresql" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-postgresql"
  name        = "matrix-postgresql"
  external_id = "matrix-postgresql"

  capability {
    access_mode = "single-node-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/postgresql"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "nomad_volume" "matrix-registrations" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-registrations"
  name        = "matrix-registrations"
  external_id = "matrix-registrations"

  capability {
    access_mode = "multi-node-multi-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/registrations"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "nomad_volume" "matrix-mautrix-facebook" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-mautrix-facebook"
  name        = "matrix-mautrix-facebook"
  external_id = "matrix-mautrix-facebook"

  capability {
    access_mode = "single-node-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/mautrix-facebook"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "nomad_volume" "matrix-mautrix-signal" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-mautrix-signal"
  name        = "matrix-mautrix-signal"
  external_id = "matrix-mautrix-signal"

  capability {
    access_mode = "single-node-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/mautrix-signal"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "nomad_volume" "matrix-redis" {
  type        = "csi"
  plugin_id   = "org.democratic-csi.nfs"
  volume_id   = "matrix-redis"
  name        = "matrix-redis"
  external_id = "matrix-redis"

  capability {
    access_mode = "single-node-writer"
    attachment_mode = "file-system"
  }

  context = {
    server = "blowhole.hosts.in.redalder.org"
    share = "/mnt/kyle/infrastructure/matrix/redis"
    node_attach_driver = "nfs"
    provisioner_driver = "node-manual"
  }

  mount_options {
    fs_type = "nfs"
    mount_flags = [ "hard", "vers=4.2", "rsize=16384", "wsize=16384", "async" ]
  }
}

resource "vault_policy" "matrix-mautrix-signal-policy" {
  name = "matrix-mautrix-signal-policy"
  policy = <<EOF
path "kv/data/cluster/matrix/mautrix-signal/main" {
  capabilities = ["read"]
}
path "kv/data/cluster/matrix/mautrix-signal/postgresql" {
  capabilities = ["read"]
}
EOF
}

resource "vault_policy" "matrix-mautrix-facebook-policy" {
  name = "matrix-mautrix-facebook-policy"
  policy = <<EOF
path "kv/data/cluster/matrix/mautrix-facebook/main" {
  capabilities = ["read"]
}
path "kv/data/cluster/matrix/mautrix-facebook/postgresql" {
  capabilities = ["read"]
}
EOF
}

resource "vault_policy" "matrix-synapse-policy" {
  name = "matrix-synapse-policy"
  policy = <<EOF
path "kv/data/cluster/matrix/synapse" {
  capabilities = ["read"]
}
EOF
}

resource "vault_policy" "matrix-postgresql-policy" {
  name = "matrix-postgresql-policy"
  policy = <<EOF
path "kv/data/cluster/matrix/synapse" {
  capabilities = ["read"]
}

path "kv/data/cluster/matrix/mautrix-facebook/postgresql" {
  capabilities = ["read"]
}

path "kv/data/cluster/matrix/mautrix-signal/postgresql" {
  capabilities = ["read"]
}
EOF
}

resource "nomad_job" "matrix-synapse" {
  jobspec = file("${path.module}/job/matrix-synapse.hcl")

  hcl2 {
    enabled = true
    vars = {
      flake_ref = "${var.flake_host}?ref=${var.flake_ref}&rev=${var.flake_rev}"
      flake_sha = var.flake_sha
    }
  }
}

resource "nomad_job" "matrix-mautrix-facebook" {
  jobspec = file("${path.module}/job/matrix-mautrix-facebook.hcl")

  hcl2 {
    enabled = true
    vars = {
      flake_ref = "${var.flake_host}?ref=${var.flake_ref}&rev=${var.flake_rev}"
      flake_sha = var.flake_sha
    }
  }
}

resource "nomad_job" "matrix-mautrix-signal" {
  jobspec = file("${path.module}/job/matrix-mautrix-signal.hcl")

  hcl2 {
    enabled = true
    vars = {
      flake_ref = "${var.flake_host}?ref=${var.flake_ref}&rev=${var.flake_rev}"
      flake_sha = var.flake_sha
    }
  }
}

resource "nomad_job" "matrix-heisenbridge" {
  jobspec = file("${path.module}/job/matrix-heisenbridge.hcl")

  hcl2 {
    enabled = true
    vars = {
      flake_ref = "${var.flake_host}?ref=${var.flake_ref}&rev=${var.flake_rev}"
      flake_sha = var.flake_sha
    }
  }
}