sstent/NomadBackup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: backup Nomad jobs [skip ci]

Browse Source
This commit is contained in:
github-actions[bot]
2025-11-21 21:10:40 +00:00
parent fe8d4976ed
commit 890c867763
29 changed files with 4519 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

305
nomad_backup/nzbget.hcl Normal file
View File

@@ -0,0 +1,305 @@
job "nzbget" {
# region = "global"
datacenters = ["dc1"]
type = "service"
# priority = 50
constraint {
attribute = "${attr.kernel.name}"
value = "linux"
}
constraint {
attribute = "${attr.unique.hostname}"
operator = "regexp"
value = "odroid.*"
}
update {
# Stagger updates every 60 seconds
stagger = "90s"
max_parallel = 1
healthy_deadline = "5m"
}
group "nzbget" {
count = 1
restart {
attempts = 8
interval = "20m"
delay = "10s"
mode = "delay"
}
// task "init-trigger" {
// driver = "docker"
// lifecycle {
// hook = "prestart"
// }
// config {
// image = "curlimages/curl"
// args = ["--request", "PUT", "--data", "${NOMAD_ALLOC_ID}", "http://${attr.unique.network.ip-address}:8500/v1/kv/${NOMAD_GROUP_NAME}"]
// }
// resources {
// cpu = 20 # 500 MHz
// memory = 20 # 128MB
// }
// }
task "ovpn-client" {
driver = "docker"
lifecycle {
hook = "prestart"
sidecar = true
}
config {
// image = "registry.service.dc1.consul:5000/openpyn:latest"
image = "qmcgaw/gluetun"
memory_hard_limit = "1024"
ports = [
"shadowsocks",
"nzbget",
"http_proxy",
"http_admin",
"sabnzb_admin",
"socks",
]
cap_add = [
"NET_ADMIN",
"NET_BIND_SERVICE",
]
#network_mode = "host"
#network_mode = "vpn"
volumes = [
"/etc/localtime:/etc/localtime",
]
devices = [
{
host_path = "/dev/net/tun"
container_path = "/dev/net/tun"
},
]
}
env {
// VPNFLAGS = "us --max-load 70 --top-servers 10 --pings 5"
// VPNFLAGS = "nl --max-load 70 --top-servers 10 --pings 5"
// VPNSP = "nordvpn"
// OPENVPN_USER = "yvPLaZ3xkXtnJKsyXDNQf9Ft"
// OPENVPN_PASSWORD = "SW8XvhGkSVuQitjuFrbH9WPA"
// REGION = "Netherlands"
##Mullvad
VPNSP = "mullvad"
VPN_TYPE = "wireguard"
COUNTRY = "Canada"
CITY = "Toronto"
FIREWALL_VPN_INPUT_PORTS = "56987"
WIREGUARD_PRIVATE_KEY = "2FHwQX1jxk+qeMmXUtSGRc2kKF1WHeSCyIgHNW+7akA=" #ActiveLynx
WIREGUARD_ADDRESS = "10.66.246.4/32"
HTTPPROXY = "on"
UPDATER_PERIOD= "24h"
SHADOWSOCKS_PASSWORD = "farscape5"
SHADOWSOCKS = "off"
DOT_PROVIDERS = "cloudflare,google,quad9,quadrant"
DOT = "off"
}
service {
name = "${TASKGROUP}-admin"
tags = ["global", "ovpn-openpyn"]
port = "http_admin"
}
service {
name = "${TASKGROUP}"
tags = ["global", "ovpn-openpyn"]
port = "shadowsocks"
}
service {
name = "nzbget"
tags = ["global", "ovpn-openpyn"]
port = "nzbget"
}
service {
name = "sabnzb"
tags = ["global", "ovpn-openpyn", "enable_gocast",
"gocast_vip=192.168.1.247/32",
"gocast_nat=tcp:8080:8080",
"gocast_nat=udp:8080:8080",]
port = "sabnzb_admin"
}
service {
name = "socks-nord"
tags = ["global", "ovpn-openpyn", "enable_gocast",
"gocast_vip=192.168.1.243/32",
"gocast_nat=tcp:1080:1080",
"gocast_nat=udp:1080:1080",]
port = "socks"
}
resources {
cpu = 100 # 500 MHz
memory = 100 # 128MB
}
} #task ovpn
task "dante" {
driver = "docker"
config {
image = "serjs/go-socks5-proxy"
// image = "ghcr.io/sstent/dante:latest"
network_mode = "container:ovpn-client-${NOMAD_ALLOC_ID}"
memory_hard_limit = 256
devices = [
{
host_path = "/dev/net/tun"
container_path = "/dev/net/tun"
},
]
}
env {
REQUIRE_AUTH = "false"
}
resources {
cpu = 64 # 500 MHz
memory = 128 # 128MB
}
}
######################################################################
######################################################################
######################################################################
task "init" {
driver = "docker"
lifecycle {
hook = "prestart"
sidecar = false
}
config {
image = "ghcr.io/sstent/rsync:v0.3.5"
memory_hard_limit = "2048"
volumes = [
"/mnt/configs/${NOMAD_GROUP_NAME}:/config",
"/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
"/mnt/Public/config/locks:/locks",
]
args = ["flock", "-x", "/locks/${NOMAD_GROUP_NAME}_rsync.lock", "rsync", "-avz", "--exclude=Backups", "/configbackup/", "/config/", "--delete-before"]
}
resources {
cpu = 20 # 500 MHz
memory = 20 # 128MB
}
} #end init task
task "finalsync" {
driver = "docker"
lifecycle {
hook = "poststop"
}
config {
// image = "pebalk/rsync"
image = "ghcr.io/sstent/rsync:v0.3.5"
memory_hard_limit = "2048"
volumes = [
"/mnt/configs/${NOMAD_GROUP_NAME}:/config",
"/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
"/mnt/Public/config/locks:/locks",
]
args = ["flock", "-x", "/locks/${NOMAD_GROUP_NAME}_rsync.lock", "rsync", "-avz", "/config/", "/configbackup/"]
}
resources {
cpu = 20 # 500 MHz
memory = 20 # 128MB
}
} #end finalsync task
// task "sync" {
// driver = "docker"
// lifecycle {
// hook = "poststart"
// sidecar = true
// }
// config {
// image = "ghcr.io/sstent/rsync:v0.3.5"
// memory_hard_limit = "2048"
// volumes = [
// "/mnt/configs/:/configs",
// "/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
// ]
// args = ["client"]
// }
// resources {
// cpu = 20 # 500 MHz
// memory = 20 # 128MB
// }
// env {
// CRON_TASK_1 = "*/20 8-20 * * * chmod a-w /configs/${NOMAD_GROUP_NAME}/ ; rsync -avz /configs/${NOMAD_GROUP_NAME}/ /configbackup/; chmod a+w /configs/${NOMAD_GROUP_NAME}/;"
// }
// } #end sync task
######################################################################
######################################################################
######################################################################
network {
port "shadowsocks" {
static = "8338"
to = "8388"
}
port "http_proxy" {
static = "8888"
to = "8888"
}
port "http_admin" {
static = "8000"
to = "8000"
}
port "sabnzb_admin" {
static = "8080"
to = "8080"
}
port "socks" {
static = "1080"
to = "1080"
}
port "nzbget" {
static = "6789"
to = "6789"
}
}
}
}