From 2c345e45ce6a1d854b62a1598380dce5da474a53 Mon Sep 17 00:00:00 2001
From: Adrian Cowan <othrayte@gmail.com>
Date: Wed, 30 Apr 2025 02:02:32 +1000
Subject: [PATCH] Add glance as home

---
 2-nomad-config/glance.nomad.hcl         | 159 ++++++++++++++++++++++++
 2-nomad-config/services.tf              |   4 +
 2-nomad-config/terraform.tfstate        |  61 ++++++++-
 2-nomad-config/terraform.tfstate.backup |  63 +++++++++-
 4 files changed, 281 insertions(+), 6 deletions(-)
 create mode 100644 2-nomad-config/glance.nomad.hcl

diff --git a/2-nomad-config/glance.nomad.hcl b/2-nomad-config/glance.nomad.hcl
new file mode 100644
index 0000000..6c551df
--- /dev/null
+++ b/2-nomad-config/glance.nomad.hcl
@@ -0,0 +1,159 @@
+job "glance" {
+  group "glance" {
+    count = 1
+
+    network {
+      port "http" {
+        to = 8080
+      }
+    }
+
+    task "glance" {
+      driver = "docker"
+
+      config {
+        image = "glanceapp/glance:latest"
+        ports = ["http"]
+        volumes = [
+          "local/glance.yml:/app/config/glance.yml",
+        ]
+      }
+
+      service {
+        name = "home"
+        port = "http"
+        
+        tags = [
+          "traefik.enable=true",
+        ]
+
+        check {
+          name     = "alive"
+          type     = "tcp"
+          port     = "http"
+          interval = "10s"
+          timeout  = "2s"
+        }
+      }
+
+      resources {
+        cpu    = 50
+        memory = 128
+      }
+
+
+      template {
+        data = <<EOF
+pages:
+  - name: Home
+    # Optionally, if you only have a single page you can hide the desktop navigation for a cleaner look
+    # hide-desktop-navigation: true
+    columns:
+      - size: small
+        widgets:
+          - type: calendar
+            first-day-of-week: monday
+
+          - type: rss
+            limit: 10
+            collapse-after: 3
+            cache: 12h
+            feeds:
+              - url: https://selfh.st/rss/
+                title: selfh.st
+                limit: 4
+              - url: https://ciechanow.ski/atom.xml
+              - url: https://www.joshwcomeau.com/rss.xml
+                title: Josh Comeau
+              - url: https://samwho.dev/rss.xml
+              - url: https://ishadeed.com/feed.xml
+                title: Ahmad Shadeed
+
+          - type: twitch-channels
+            channels:
+              - theprimeagen
+              - j_blow
+              - piratesoftware
+              - cohhcarnage
+              - christitustech
+              - EJ_SA
+
+      - size: full
+        widgets:
+          - type: group
+            widgets:
+              - type: hacker-news
+              - type: lobsters
+
+          - type: videos
+            channels:
+              - UCXuqSBlHAE6Xw-yeJA0Tunw # Linus Tech Tips
+              - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling
+              - UCsBjURrPoezykLs9EqgamOA # Fireship
+              - UCBJycsmduvYEL83R_U4JriQ # Marques Brownlee
+              - UCHnyfMqiRRG1u-2MsSQLbXA # Veritasium
+
+          - type: group
+            widgets:
+              - type: reddit
+                subreddit: technology
+                show-thumbnails: true
+              - type: reddit
+                subreddit: selfhosted
+                show-thumbnails: true
+
+      - size: small
+        widgets:
+          - type: weather
+            location: London, United Kingdom
+            units: metric # alternatively "imperial"
+            hour-format: 12h # alternatively "24h"
+            # Optionally hide the location from being displayed in the widget
+            # hide-location: true
+
+          - type: markets
+            markets:
+              - symbol: SPY
+                name: S&P 500
+              - symbol: BTC-USD
+                name: Bitcoin
+              - symbol: NVDA
+                name: NVIDIA
+              - symbol: AAPL
+                name: Apple
+              - symbol: MSFT
+                name: Microsoft
+
+          - type: releases
+            cache: 1d
+            # Without authentication the Github API allows for up to 60 requests per hour. You can create a
+            # read-only token from your Github account settings and use it here to increase the limit.
+            # token: ...
+            repositories:
+              - glanceapp/glance
+              - go-gitea/gitea
+              - immich-app/immich
+              - syncthing/syncthing
+
+  # Add more pages here:
+  # - name: Your page name
+  #   columns:
+  #     - size: small
+  #       widgets:
+  #         # Add widgets here
+
+  #     - size: full
+  #       widgets:
+  #         # Add widgets here
+
+  #     - size: small
+  #       widgets:
+  #         # Add widgets here
+EOF
+
+        destination = "local/glance.yml"
+      }
+
+    }
+  }
+}
\ No newline at end of file
diff --git a/2-nomad-config/services.tf b/2-nomad-config/services.tf
index 0e7a2ed..1ff018b 100644
--- a/2-nomad-config/services.tf
+++ b/2-nomad-config/services.tf
@@ -3,6 +3,10 @@ provider "nomad" {
   address = "http://jaglan-beta-m01:4646"
 }
 
+resource "nomad_job" "glance" {
+  jobspec = file("glance.nomad.hcl")
+}
+
 resource "nomad_job" "hello_world" {
   jobspec = file("hello-world.nomad.hcl")
 }
diff --git a/2-nomad-config/terraform.tfstate b/2-nomad-config/terraform.tfstate
index 3b37a8e..074eae0 100644
--- a/2-nomad-config/terraform.tfstate
+++ b/2-nomad-config/terraform.tfstate
@@ -1,10 +1,65 @@
 {
   "version": 4,
   "terraform_version": "1.11.4",
-  "serial": 191,
+  "serial": 200,
   "lineage": "15e0900c-88bc-9754-4600-e3977d018ba0",
   "outputs": {},
   "resources": [
+    {
+      "mode": "managed",
+      "type": "nomad_job",
+      "name": "glance",
+      "provider": "provider[\"registry.terraform.io/hashicorp/nomad\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "allocation_ids": [],
+            "datacenters": [
+              "*"
+            ],
+            "deployment_id": null,
+            "deployment_status": null,
+            "deregister_on_destroy": true,
+            "deregister_on_id_change": true,
+            "detach": true,
+            "hcl2": [],
+            "id": "glance",
+            "jobspec": "job \"glance\" {\n  group \"glance\" {\n    count = 1\n\n    network {\n      port \"http\" {\n        to = 8080\n      }\n    }\n\n    task \"glance\" {\n      driver = \"docker\"\n\n      config {\n        image = \"glanceapp/glance:latest\"\n        ports = [\"http\"]\n        volumes = [\n          \"local/glance.yml:/app/config/glance.yml\",\n        ]\n      }\n\n      service {\n        name = \"home\"\n        port = \"http\"\n        \n        tags = [\n          \"traefik.enable=true\",\n        ]\n\n        check {\n          name     = \"alive\"\n          type     = \"tcp\"\n          port     = \"http\"\n          interval = \"10s\"\n          timeout  = \"2s\"\n        }\n      }\n\n      resources {\n        cpu    = 50\n        memory = 128\n      }\n\n\n      template {\n        data = \u003c\u003cEOF\npages:\n  - name: Home\n    # Optionally, if you only have a single page you can hide the desktop navigation for a cleaner look\n    # hide-desktop-navigation: true\n    columns:\n      - size: small\n        widgets:\n          - type: calendar\n            first-day-of-week: monday\n\n          - type: rss\n            limit: 10\n            collapse-after: 3\n            cache: 12h\n            feeds:\n              - url: https://selfh.st/rss/\n                title: selfh.st\n                limit: 4\n              - url: https://ciechanow.ski/atom.xml\n              - url: https://www.joshwcomeau.com/rss.xml\n                title: Josh Comeau\n              - url: https://samwho.dev/rss.xml\n              - url: https://ishadeed.com/feed.xml\n                title: Ahmad Shadeed\n\n          - type: twitch-channels\n            channels:\n              - theprimeagen\n              - j_blow\n              - piratesoftware\n              - cohhcarnage\n              - christitustech\n              - EJ_SA\n\n      - size: full\n        widgets:\n          - type: group\n            widgets:\n              - type: hacker-news\n              - type: lobsters\n\n          - type: videos\n            channels:\n              - UCXuqSBlHAE6Xw-yeJA0Tunw # Linus Tech Tips\n              - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling\n              - UCsBjURrPoezykLs9EqgamOA # Fireship\n              - UCBJycsmduvYEL83R_U4JriQ # Marques Brownlee\n              - UCHnyfMqiRRG1u-2MsSQLbXA # Veritasium\n\n          - type: group\n            widgets:\n              - type: reddit\n                subreddit: technology\n                show-thumbnails: true\n              - type: reddit\n                subreddit: selfhosted\n                show-thumbnails: true\n\n      - size: small\n        widgets:\n          - type: weather\n            location: London, United Kingdom\n            units: metric # alternatively \"imperial\"\n            hour-format: 12h # alternatively \"24h\"\n            # Optionally hide the location from being displayed in the widget\n            # hide-location: true\n\n          - type: markets\n            markets:\n              - symbol: SPY\n                name: S\u0026P 500\n              - symbol: BTC-USD\n                name: Bitcoin\n              - symbol: NVDA\n                name: NVIDIA\n              - symbol: AAPL\n                name: Apple\n              - symbol: MSFT\n                name: Microsoft\n\n          - type: releases\n            cache: 1d\n            # Without authentication the Github API allows for up to 60 requests per hour. You can create a\n            # read-only token from your Github account settings and use it here to increase the limit.\n            # token: ...\n            repositories:\n              - glanceapp/glance\n              - go-gitea/gitea\n              - immich-app/immich\n              - syncthing/syncthing\n\n  # Add more pages here:\n  # - name: Your page name\n  #   columns:\n  #     - size: small\n  #       widgets:\n  #         # Add widgets here\n\n  #     - size: full\n  #       widgets:\n  #         # Add widgets here\n\n  #     - size: small\n  #       widgets:\n  #         # Add widgets here\nEOF\n\n        destination = \"local/glance.yml\"\n      }\n\n    }\n  }\n}",
+            "json": null,
+            "modify_index": "9580",
+            "name": "glance",
+            "namespace": "default",
+            "policy_override": null,
+            "purge_on_destroy": null,
+            "read_allocation_ids": false,
+            "region": "global",
+            "rerun_if_dead": false,
+            "status": "pending",
+            "task_groups": [
+              {
+                "count": 1,
+                "meta": {},
+                "name": "glance",
+                "task": [
+                  {
+                    "driver": "docker",
+                    "meta": {},
+                    "name": "glance",
+                    "volume_mounts": null
+                  }
+                ],
+                "volumes": null
+              }
+            ],
+            "timeouts": null,
+            "type": "service"
+          },
+          "sensitive_attributes": [],
+          "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjozMDAwMDAwMDAwMDAsInVwZGF0ZSI6MzAwMDAwMDAwMDAwfX0="
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "nomad_job",
@@ -70,7 +125,9 @@
           "schema_version": 0,
           "attributes": {
             "allocation_ids": [],
-            "datacenters": [],
+            "datacenters": [
+              "*"
+            ],
             "deployment_id": null,
             "deployment_status": null,
             "deregister_on_destroy": true,
diff --git a/2-nomad-config/terraform.tfstate.backup b/2-nomad-config/terraform.tfstate.backup
index 23e8539..b216f7c 100644
--- a/2-nomad-config/terraform.tfstate.backup
+++ b/2-nomad-config/terraform.tfstate.backup
@@ -1,10 +1,63 @@
 {
   "version": 4,
   "terraform_version": "1.11.4",
-  "serial": 189,
+  "serial": 197,
   "lineage": "15e0900c-88bc-9754-4600-e3977d018ba0",
   "outputs": {},
   "resources": [
+    {
+      "mode": "managed",
+      "type": "nomad_job",
+      "name": "dns_server",
+      "provider": "provider[\"registry.terraform.io/hashicorp/nomad\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "allocation_ids": [],
+            "datacenters": [],
+            "deployment_id": null,
+            "deployment_status": null,
+            "deregister_on_destroy": true,
+            "deregister_on_id_change": true,
+            "detach": true,
+            "hcl2": [],
+            "id": "dns-server",
+            "jobspec": "job \"dns-server\" {\n  group \"dns\" {\n    count = 1\n\n    network {\n      port \"dns\" {\n        static = 53\n      }\n    }\n\n    task \"dnsmasq\" {\n      driver = \"docker\"\n\n      config {\n        image = \"dockurr/dnsmasq:latest\"\n        ports = [\"dns\"]\n        args = [\n          \"--address=/othrayte.one/2401:d002:b803:a000::223\",\n          \"--address=/*.othrayte.one/2401:d002:b803:a000::223\"\n        ]\n      }\n\n      resources {\n        cpu    = 500\n        memory = 256\n      }\n    }\n  }\n}",
+            "json": null,
+            "modify_index": "9394",
+            "name": "dns-server",
+            "namespace": "default",
+            "policy_override": null,
+            "purge_on_destroy": null,
+            "read_allocation_ids": false,
+            "region": "global",
+            "rerun_if_dead": false,
+            "status": "running",
+            "task_groups": [
+              {
+                "count": 1,
+                "meta": {},
+                "name": "dns",
+                "task": [
+                  {
+                    "driver": "docker",
+                    "meta": {},
+                    "name": "dnsmasq",
+                    "volume_mounts": []
+                  }
+                ],
+                "volumes": []
+              }
+            ],
+            "timeouts": null,
+            "type": "service"
+          },
+          "sensitive_attributes": [],
+          "private": "eyJlMmJmYjczMC1lY2FhLTExZTYtOGY4OC0zNDM2M2JjN2M0YzAiOnsiY3JlYXRlIjozMDAwMDAwMDAwMDAsInVwZGF0ZSI6MzAwMDAwMDAwMDAwfX0="
+        }
+      ]
+    },
     {
       "mode": "managed",
       "type": "nomad_job",
@@ -70,7 +123,9 @@
           "schema_version": 0,
           "attributes": {
             "allocation_ids": [],
-            "datacenters": [],
+            "datacenters": [
+              "*"
+            ],
             "deployment_id": null,
             "deployment_status": null,
             "deregister_on_destroy": true,
@@ -78,9 +133,9 @@
             "detach": true,
             "hcl2": [],
             "id": "traefik",
-            "jobspec": "job \"traefik\" {\n  group \"traefik\" {\n    network {\n      port \"http\" {\n        static = 80\n      }\n\n      port \"https\" {\n        static = 443\n      }\n\n      port \"api\" {\n        static = 8081\n      }\n    }\n\n    service {\n      name = \"traefik\"\n\n      tags = [\n        \"traefik.enable=true\",\n        \"traefik.http.routers.traefik.rule=Host(`traefik.othrayte.one`)\",\n        \"traefik.http.routers.traefik.service=traefik\",\n        \"traefik.http.services.traefik.loadbalancer.server.port=8081\",\n      ]\n\n      check {\n        name     = \"alive\"\n        type     = \"tcp\"\n        port     = \"http\"\n        interval = \"10s\"\n        timeout  = \"2s\"\n      }\n    }\n\n    volume \"traefik\" {\n      type      = \"host\"\n      read_only = false\n      source    = \"traefik\"\n    }\n\n    task \"traefik\" {\n      driver = \"docker\"\n\n      config {\n        image        = \"traefik:v3.3\"\n        network_mode = \"host\"\n\n        volumes = [\n          \"local/traefik.yml:/etc/traefik/traefik.yml\",\n          \"local/configs/:/etc/traefik/configs/\"\n        ]\n      }\n\n      volume_mount {\n        volume      = \"traefik\"\n        destination = \"/opt/traefik\"\n        read_only   = false\n      }\n\n      template {\n        data = \u003c\u003cEOF\nentryPoints:\n  web:\n    address: \":80\"\n    http:\n      redirections:\n        entryPoint:\n          to: websecure\n          scheme: https\n  websecure:\n    address: \":443\"\n    http:\n      middlewares:\n        - auth@file\n      tls:\n        certResolver: letsencrypt\n  traefik:\n    address: \":8081\"\n\napi:\n  dashboard: true\n  insecure: true\n\nproviders:\n  file:\n    directory: \"/etc/traefik/configs/\"\n\n  consulCatalog:\n    prefix: \"traefik\"\n    exposedByDefault: false\n    defaultRule: {{\"Host(`{{ .Name }}.othrayte.one`)\"}}\n    endpoint:\n      address: \"127.0.0.1:8500\"\n      scheme: \"http\"\n    # tls: {}\n\ncertificatesResolvers:\n  letsencrypt:\n    acme:\n      email: \"othrayte@gmail.com\"\n      storage: \"/opt/traefik/acme.json\"\n      httpChallenge:\n        entryPoint: web\nEOF\n\n        destination = \"local/traefik.yml\"\n      }\n\n      template {\n        data = \u003c\u003cEOF\nhttp:\n  middlewares:\n    auth:\n      basicAuth:\n        users:\n          - \"othrayte:$apr1$7PqVUfNm$Go/SNo6y331KYDnQdOLIt/\"\n \n  routers:\n    nomadui:\n      rule: \"Host(`nomad.othrayte.one`)\"\n      service: nomadui\n    consului:\n      rule: \"Host(`consul.othrayte.one`)\"\n      service: consului\n\n  services:\n    nomadui:\n      loadBalancer:\n        servers:\n          - url: \"http://127.0.0.1:4646\"\n    consului:\n      loadBalancer:\n        servers:\n          - url: \"http://127.0.0.1:8500\"\nEOF\n\n        destination = \"local/configs/nomad.yml\"\n      }\n\n      resources {\n        cpu    = 100\n        memory = 128\n      }\n    }\n  }\n}\n",
+            "jobspec": "job \"traefik\" {\n  group \"traefik\" {\n    network {\n      port \"http\" {\n        static = 80\n      }\n\n      port \"https\" {\n        static = 443\n      }\n\n      port \"api\" {\n        static = 8081\n      }\n    }\n\n    service {\n      name = \"traefik\"\n\n      tags = [\n        \"traefik.enable=true\",\n        \"traefik.http.routers.traefik.rule=Host(`traefik.othrayte.one`)\",\n        \"traefik.http.routers.traefik.service=traefik\",\n        \"traefik.http.services.traefik.loadbalancer.server.port=8081\",\n      ]\n\n      check {\n        name     = \"alive\"\n        type     = \"tcp\"\n        port     = \"http\"\n        interval = \"10s\"\n        timeout  = \"2s\"\n      }\n    }\n\n    volume \"traefik\" {\n      type      = \"host\"\n      read_only = false\n      source    = \"traefik\"\n    }\n\n    task \"traefik\" {\n      driver = \"docker\"\n\n      config {\n        image        = \"traefik:v3.3\"\n        network_mode = \"host\"\n\n        volumes = [\n          \"local/traefik.yml:/etc/traefik/traefik.yml\",\n          \"local/configs/:/etc/traefik/configs/\"\n        ]\n      }\n\n      volume_mount {\n        volume      = \"traefik\"\n        destination = \"/opt/traefik\"\n        read_only   = false\n      }\n\n      template {\n        data = \u003c\u003cEOF\nentryPoints:\n  web:\n    address: \":80\"\n    http:\n      redirections:\n        entryPoint:\n          to: websecure\n          scheme: https\n  websecure:\n    address: \":443\"\n    http:\n      middlewares:\n        - auth@file\n      tls:\n        certResolver: letsencrypt\n  traefik:\n    address: \":8081\"\n\napi:\n  dashboard: true\n  insecure: true\n\nproviders:\n  file:\n    directory: \"/etc/traefik/configs/\"\n\n  consulCatalog:\n    prefix: \"traefik\"\n    exposedByDefault: false\n    defaultRule: {{\"Host(`{{ .Name }}.othrayte.one`)\"}}\n    endpoint:\n      address: \"127.0.0.1:8500\"\n      scheme: \"http\"\n\ncertificatesResolvers:\n  letsencrypt:\n    acme:\n      email: \"othrayte@gmail.com\"\n      storage: \"/opt/traefik/acme.json\"\n      httpChallenge:\n        entryPoint: web\nEOF\n\n        destination = \"local/traefik.yml\"\n      }\n\n      template {\n        data = \u003c\u003cEOF\nhttp:\n  middlewares:\n    auth:\n      basicAuth:\n        users:\n          - \"othrayte:$apr1$7PqVUfNm$Go/SNo6y331KYDnQdOLIt/\"\n \n  routers:\n    nomadui:\n      rule: \"Host(`nomad.othrayte.one`)\"\n      service: nomadui\n    consului:\n      rule: \"Host(`consul.othrayte.one`)\"\n      service: consului\n\n  services:\n    nomadui:\n      loadBalancer:\n        servers:\n          - url: \"http://127.0.0.1:4646\"\n    consului:\n      loadBalancer:\n        servers:\n          - url: \"http://127.0.0.1:8500\"\nEOF\n\n        destination = \"local/configs/nomad.yml\"\n      }\n\n      resources {\n        cpu    = 100\n        memory = 128\n      }\n    }\n  }\n}\n",
             "json": null,
-            "modify_index": "9300",
+            "modify_index": "9314",
             "name": "traefik",
             "namespace": "default",
             "policy_override": null,