diff options
Diffstat (limited to 'terraform/concourse/concourse.tf')
| -rw-r--r-- | terraform/concourse/concourse.tf | 36 |
1 files changed, 29 insertions, 7 deletions
diff --git a/terraform/concourse/concourse.tf b/terraform/concourse/concourse.tf index c191196..28b6d21 100644 --- a/terraform/concourse/concourse.tf +++ b/terraform/concourse/concourse.tf @@ -17,7 +17,29 @@ resource "docker_container" "concourse" { ports { internal = 8080 external = 8080 - ip = "192.168.10.147" + ip = "192.168.10.147" + } + + labels { + label = "traefik.enable" + value = "true" + } + + labels { + label = "traefik.enable" + value = "true" + } + labels { + label = "traefik.http.routers.concourse.rule" + value = "Host(`concourse.vpn.trygvis.io`)" + } + labels { + label = "traefik.http.routers.concourse.entrypoints" + value = "websecure" + } + labels { + label = "traefik.http.routers.concourse.tls.certresolver" + value = "linode" } env = [ @@ -27,7 +49,7 @@ resource "docker_container" "concourse" { "CONCOURSE_POSTGRES_DATABASE=concourse", "CONCOURSE_POSTGRES_PORT=5432", "CONCOURSE_POSTGRES_SSLMODE=require", - "CONCOURSE_EXTERNAL_URL=https://concourse.trygvis.io", + "CONCOURSE_EXTERNAL_URL=https://concourse.vpn.trygvis.io", "CONCOURSE_WORKER_BAGGAGECLAIM_DRIVER=overlay", "CONCOURSE_CLIENT_SECRET=Y29uY291cnNlLXdlYgo=", "CONCOURSE_TSA_CLIENT_SECRET=Y29uY291cnNlLXdvcmtlcgo=", @@ -41,11 +63,11 @@ resource "docker_container" "concourse" { "CONCOURSE_ADD_LOCAL_USER=trygvis:trygvis", "CONCOURSE_MAIN_TEAM_LOCAL_USER=trygvis", -# "CONCOURSE_MAIN_TEAM_GITHUB_ORG=org-name", -# "CONCOURSE_MAIN_TEAM_GITHUB_TEAM=bitraf:Drift", -# "CONCOURSE_MAIN_TEAM_GITHUB_USER=some-user", + # "CONCOURSE_MAIN_TEAM_GITHUB_ORG=org-name", + # "CONCOURSE_MAIN_TEAM_GITHUB_TEAM=bitraf:Drift", + # "CONCOURSE_MAIN_TEAM_GITHUB_USER=some-user", -# "CONCOURSE_GITHUB_CLIENT_ID=${data.ansiblevault_path.github_client_id.value}", -# "CONCOURSE_GITHUB_CLIENT_SECRET=${data.ansiblevault_path.github_client_secret.value}", + # "CONCOURSE_GITHUB_CLIENT_ID=${data.ansiblevault_path.github_client_id.value}", + # "CONCOURSE_GITHUB_CLIENT_SECRET=${data.ansiblevault_path.github_client_secret.value}", ] } |