aboutsummaryrefslogtreecommitdiff
path: root/terraform/concourse
diff options
context:
space:
mode:
Diffstat (limited to 'terraform/concourse')
-rw-r--r--terraform/concourse/concourse.tf36
1 files changed, 29 insertions, 7 deletions
diff --git a/terraform/concourse/concourse.tf b/terraform/concourse/concourse.tf
index c191196..28b6d21 100644
--- a/terraform/concourse/concourse.tf
+++ b/terraform/concourse/concourse.tf
@@ -17,7 +17,29 @@ resource "docker_container" "concourse" {
ports {
internal = 8080
external = 8080
- ip = "192.168.10.147"
+ ip = "192.168.10.147"
+ }
+
+ labels {
+ label = "traefik.enable"
+ value = "true"
+ }
+
+ labels {
+ label = "traefik.enable"
+ value = "true"
+ }
+ labels {
+ label = "traefik.http.routers.concourse.rule"
+ value = "Host(`concourse.vpn.trygvis.io`)"
+ }
+ labels {
+ label = "traefik.http.routers.concourse.entrypoints"
+ value = "websecure"
+ }
+ labels {
+ label = "traefik.http.routers.concourse.tls.certresolver"
+ value = "linode"
}
env = [
@@ -27,7 +49,7 @@ resource "docker_container" "concourse" {
"CONCOURSE_POSTGRES_DATABASE=concourse",
"CONCOURSE_POSTGRES_PORT=5432",
"CONCOURSE_POSTGRES_SSLMODE=require",
- "CONCOURSE_EXTERNAL_URL=https://concourse.trygvis.io",
+ "CONCOURSE_EXTERNAL_URL=https://concourse.vpn.trygvis.io",
"CONCOURSE_WORKER_BAGGAGECLAIM_DRIVER=overlay",
"CONCOURSE_CLIENT_SECRET=Y29uY291cnNlLXdlYgo=",
"CONCOURSE_TSA_CLIENT_SECRET=Y29uY291cnNlLXdvcmtlcgo=",
@@ -41,11 +63,11 @@ resource "docker_container" "concourse" {
"CONCOURSE_ADD_LOCAL_USER=trygvis:trygvis",
"CONCOURSE_MAIN_TEAM_LOCAL_USER=trygvis",
-# "CONCOURSE_MAIN_TEAM_GITHUB_ORG=org-name",
-# "CONCOURSE_MAIN_TEAM_GITHUB_TEAM=bitraf:Drift",
-# "CONCOURSE_MAIN_TEAM_GITHUB_USER=some-user",
+ # "CONCOURSE_MAIN_TEAM_GITHUB_ORG=org-name",
+ # "CONCOURSE_MAIN_TEAM_GITHUB_TEAM=bitraf:Drift",
+ # "CONCOURSE_MAIN_TEAM_GITHUB_USER=some-user",
-# "CONCOURSE_GITHUB_CLIENT_ID=${data.ansiblevault_path.github_client_id.value}",
-# "CONCOURSE_GITHUB_CLIENT_SECRET=${data.ansiblevault_path.github_client_secret.value}",
+ # "CONCOURSE_GITHUB_CLIENT_ID=${data.ansiblevault_path.github_client_id.value}",
+ # "CONCOURSE_GITHUB_CLIENT_SECRET=${data.ansiblevault_path.github_client_secret.value}",
]
}