#nomad server 설정
server {
  enabled = true
  bootstrap_expect = 3
  license_path="/opt/nomad/license/nomad.license"
  server_join {
    retry_join = ["172.30.1.17","172.30.1.18","172.30.1.19"]
  }
  raft_protocol = 3
  event_buffer_size = 100
  non_voting_server = false
  heartbeat_grace = "10s"
}
 
 
#tls 설정
tls {
  http = true
  rpc  = true
 
  ca_file   = "/opt/ssl/nomad/nomad-agent-ca.pem"
  cert_file = "/opt/ssl/nomad/global-server-nomad-0.pem"
  key_file  = "/opt/ssl/nomad/global-server-nomad-0-key.pem"
 
  #UI오픈할 서버만 변경
  verify_server_hostname = false
  verify_https_client    = false
  #일반서버는 아래와 같이 설정
  verify_server_hostname = true
  verify_https_client    = true
}

#nomad client 설정
 
client {
  enabled = true
  servers = ["172.30.1.17","172.30.1.18","172.30.1.19"]
  server_join {
    retry_join = ["172.30.1.17","172.30.1.18","172.30.1.19"]
    retry_max = 3
    retry_interval = "15s"
  }
  #host에서 nomad에서 사용할 수 있는 volume 설정
  host_volume "logs" {
    path      = "/var/logs/elk/"
    read_only = false
  }
  #각각의 client의 레이블 작성
  #meta {
  #   name = "moon"
  #   zone = "web"
  #}
  #nomad에서 예약할 자원
  reserved {
    #Specifies the amount of CPU to reserve, in MHz.
    cpu = 200
    #Specifies the amount of memory to reserve, in MB.
    memory = 8192
    #Specifies the amount of disk to reserve, in MB.
    disk = 102400
  }
  no_host_uuid = true
  #bridge network interface name
  bridge_network_name = "nomad"
  bridge_network_subnet = "172.26.64.0/20"
  cni_path = "/opt/cni/bin"
  cni_config_dir = "/opt/cni/config"
}
#tls 설정
tls {
  http = true
  rpc  = true
 
  ca_file   = "/opt/ssl/nomad/nomad-agent-ca.pem"
  cert_file = "/opt/ssl/nomad/global-client-nomad-0.pem"
  key_file  = "/opt/ssl/nomad/global-client-nomad-0-key.pem"
 
  verify_server_hostname = true
  verify_https_client    = true
}

#nomad 공통 설정
datacenter = "dc1"
region = "global"
data_dir = "/opt/nomad/nomad"
bind_addr = "{{ GetInterfaceIP `ens192` }}"
 
advertise {
  # Defaults to the first private IP address.
  #http = "{{ GetInterfaceIP `ens244` }}"
  #rpc  = "{{ GetInterfaceIP `ens244` }}"
  #serf = "{{ GetInterfaceIP `ens244` }}"
  http = "{{ GetInterfaceIP `ens192` }}"
  rpc = "{{ GetInterfaceIP `ens192` }}"
  serf = "{{ GetInterfaceIP `ens192` }}"
}
 
consul {
  address  = "127.0.0.1:8500"
  server_service_name = "nomad"
  client_service_name = "nomad-client"
  auto_advertise  = true
  server_auto_join  = true
  client_auto_join  = true
  #consul join용 token
  token = "33ee4276-e1ef-8e5b-d212-1f94ca8cf81e"
}
enable_syslog = false
enable_debug = false
disable_update_check = false
 
log_level = "DEBUG"
log_file = "/var/log/nomad/nomad.log"
log_rotate_duration = "24h"
log_rotate_bytes = 104857600
log_rotate_max_files = 100
 
ports {
  http = 4646
  rpc = 4647
  serf = 4648
}
 
#prometheus에서 nomad의 metrics값을 수집 해 갈 수 있게 해주는 설정
telemetry {
  collection_interval = "1s"
  disable_hostname = true
  prometheus_metrics = true
  publish_allocation_metrics = true
  publish_node_metrics = true
}
 
 
plugin "docker" {
  config {
    auth {
      config = "/root/.docker/config.json"
    }
    #온프레이머스환경에서는 해당 이미지를 private repository에 ㅓㄶ고 변경
    infra_image = "google-containers/pause-amd64:3.1"
  }
}
 
acl {
  enabled = true
}

job "frontback_job" {
  group "backend_group_v1" {

    count = 1

    consul {
      namespace = "mynamespace"
    }

    service {
      name = "backend"
      port = "http"

      connect {
        sidecar_service {}
      }

      check {
        type     = "http"
        path     = "/"
        interval = "5s"
        timeout  = "3s"
      }
    }
# 생략