traefik.hcl

job "traefik" {
  datacenters = ["dc1"]
  type        = "service"

  constraint {
    attribute = "${attr.unique.hostname}"
    value     = "hermes"
  }
  group "traefik" {
    network {
      port "http" {
        static = 80
      }
      port "https" {
        static = 443
      }
      port "admin" {
        static = 8081
      }
      port "voice" {
        static = 64738
      }
    }

    service {
      name = "traefik-http"
      port = "https"
    }

    task "traefik" {
      driver = "docker"
      config {
        image        = "traefik:latest"
        network_mode = "host"

        volumes = [
          "local/traefik.toml:/etc/traefik/traefik.toml",
          "local/traefik_dynamic.toml:/etc/traefik/traefik_dynamic.toml"
        ]
      }

      template {
        data = <<EOF
CLOUDFLARE_API_KEY={{ key cloudflare/key }} 
CLOUDFLARE_EMAIL={{ key cloudflare/email }}
EOF
        destination = "local/env"
        env = true
      }

      template {
        data = <<EOF
[log]
  level = "INFO"

[accesslog]

[metrics]
  [metrics.prometheus]

[api]
  dashboard = true
  insecure = true

[entryPoints]
  [entryPoints.web]
  address = ":80"

  [entryPoints.web.http.redirections.entryPoint]
    to = "websecure"
    scheme = "https"

  [entryPoints.websecure]
    address = ":443"
    asDefault = true

    [entryPoints.websecure.http.tls]
      certresolver = "lets-encrypt"

    [[entryPoints.websecure.http.tls.domains]]
      main = "james-hackett.ie"
      sans = ["*.james-hackett.ie"]

    [[entryPoints.websecure.http.tls.domains]]
      main = "dbyte.xyz"
      sans = ["*.dbyte.xyz"]

    [[entryPoints.websecure.http.tls.domains]]
      main = "ihatenixos.org"
      sans = "*.ihatenixos.org"

    [[entryPoints.websecure.http.tls.domains]]
      main = "pint.ing"
      sans = "*.pint.ing"

    [[entryPoints.websecure.http.tls.domains]]
      main = "crazybitta.biz"
      sans = "*.crazybitta.biz"

    [[entryPoints.websecure.http.tls.domains]]
      main = "nicecocks.biz"
      sans = "*.nicecocks.biz"

  [entryPoints.traefik]
    address = ":8081"

  [entryPoints.voice-tcp]
    address = ":64738"
  
  [entryPoints.voice-udp]
    address = ":64738/udp"
    [entryPoints.voice-udp.udp]
      timeout = "15s" # this will help reduce random dropouts in audio https://github.com/mumble-voip/mumble/issues/3550#issuecomment-441495977

[providers.consulCatalog]
  prefix = "traefik"
  exposedByDefault = false
  [providers.consulCatalog.endpoint]
    address = "127.0.0.1:8500"
    scheme  = "http"

[providers.nomad]
  prefix = "traefik"
  exposedByDefault = false
  [providers.nomad.endpoint]
    address = "http://127.0.0.1:4646"

[certificatesResolvers.lets-encrypt.acme]
  email = "jamesthackett1@gmail.com"
  storage = "local/acme.json"
  [certificatesResolvers.lets-encrypt.acme.dnsChallenge]
    provider = "cloudflare"

[providers.file]
  filename = "local/traefik_dynamic.toml"
EOF

        destination = "local/traefik.toml"
      }

      template {
        data = <<EOH
[http.routers.synophotos]
  rule = "Host(`photos.dbyte.xyz`)"
  entryPoints = ["websecure"]
  service = "synophotos"
  [http.routers.synophotos.tls]
    certResolver = "lets-encrypt"

[[http.services.synophotos.loadBalancer.servers]]
  url = "http://192.168.0.5:5007/"

[http.routers.synodrive]
  rule = "Host(`drive.dbyte.xyz`)"
  entryPoints = ["websecure"]
  service = "synodrive"
  [http.routers.synodrive.tls]
    certResolver = "lets-encrypt"

[[http.services.synodrive.loadBalancer.servers]]
  url = "http://192.168.0.5:5002/"

[http.routers.plausible]
  rule = "Host(`plausible.dbyte.xyz`)"
  entryPoints = ["websecure"]
  service = "plausible"
  [http.routers.plausible.tls]
    certResolver = "lets-encrypt"

[[http.services.plausible.loadBalancer.servers]]
  url = "http://192.168.0.3:8000/"

[http.routers.video]
  rule = "Host(`video.dbyte.xyz`)"
  entryPoints = ["websecure"]
  service = "video"
  [http.routers.video.tls]
    certResolver = "lets-encrypt"

[[http.services.video.loadBalancer.servers]]
  url = "http://192.168.0.5:32400/"
EOH

        destination = "local/traefik_dynamic.toml"
      }
    }
  }
}