a drone runner which creates nomad jobs

_sys/traefik.hcl

@@ -18,6 +18,7 @@ job "traefik" {
       port "api" {
         static = 81
       }
+      
     }
 
     service {

apps/drone/live-runner-podman-nomad.hcl

@@ -0,0 +1,72 @@
+job "drone-runner" {
+    datacenters = [
+	"nummer5",
+    ]
+	type = "service"
+
+	group "apps" {
+	    count = 1
+
+		network {
+		    mode = "host"
+			port "http" {
+			    to = 3000
+			}
+
+		}
+
+	    service {
+		name = "drone-runner"
+		    port = "http"
+	    }
+
+	    volume "drone-runner" {
+		type      = "csi"
+		    source    = "drone-runner"
+		    read_only = false
+		    access_mode = "single-node-writer"
+		    attachment_mode = "file-system"
+	    }
+
+	    restart {
+		attempts = 5
+		    delay    = "30s"
+	    }
+
+	    task "drone-runner" {
+		driver = "podman"
+		    env {
+# Connection parameters
+			DRONE_RPC_PROTO="http"
+			    DRONE_RPC_HOST="drone.service.nr5"
+			    DRONE_RPC_SECRET="7eb685ed81d0c34bafc5efa7783c20b2"
+# Nomad config
+			    DRONE_JOB_DATACENTER="nummer5"
+			    NOMAD_ADDR="http://nomad.service.nr5"
+# Runner agent settings
+			    DRONE_RUNNER_CAPACITY="1"
+			    DRONE_RUNNER_MAX_PROCS="3"
+			    DRONE_RUNNER_NAME="drone-podman-runner1"
+# Logging
+			    DRONE_DEBUG="true"
+			    DRONE_TRACE="true"
+			    DRONE_RPC_DUMP_HTTP="true"
+			    DRONE_RPC_DUMP_HTTP_BODY="true"
+			    DRONE_TASK_MEMORY="256"
+		    }
+		config {
+		    image = "cr.wks/drone-runner-nomad-podman:latest"
+			volumes = [
+			"/run/podman/podman.sock:/var/run/podman.sock",
+			"/etc/containers:/etc/containers"
+			]
+#network_mode = "slirp4netns"
+			ports = ["http"]
+		}
+		resources {
+		    cpu    = 480
+			memory = 200
+		}
+	}
+}
+}

apps/gitea/live.hcl

@@ -27,6 +27,13 @@ job "gitea" {
           "traefik.enable=true",
           "traefik.http.routers.gitea.rule=Host(`gitea.service.nr5`)",
         ]
+        
+        check {
+         type     = "http"
+         path     = "/user/login"
+         interval = "120s"
+         timeout  = "5s"
+       }
     }
 
     volume "gitea-data" {

apps/postgresql/live.hcl

@@ -16,14 +16,28 @@ job "postgres" {
         access_mode = "single-node-writer"
         attachment_mode = "file-system"
     }
+    
+    network {
+        mode = "host"
+        port "postgres"{
+          static = 5432
+        }
+    }
+    service {
+        name = "postgres"
+        port = "postgres"
+        
+        tags = [
+            "traefik.enable=true",
+            "traefik.tcp.routers.postgres.rule=HostSNI(`postgres.service.nr5`)",
+        ]
+    
+    }
     task "postgres" {
       driver = "podman"
       config {
         image = "docker.io/postgres:13"
-        network_mode = "host"
+        ports = ["postgres"]
-        port_map {
-          db = 5432
-        }
       }
       volume_mount {
         volume = "postgres-data"
@@ -42,24 +56,9 @@ job "postgres" {
       resources {
         cpu = 1000
         memory = 1024
-        network {
-          port  "db"  {
-            static = 5432
-          }
-        }
-      }
-      service {
-        name = "postgres"
-        tags = ["postgres for vault"]
-        port = "db"
 
-        check {
-          name     = "alive"
-          type     = "tcp"
-          interval = "60s"
-          timeout  = "2s"
-        }
       }
+    
     }
     restart {
       attempts = 10