# There can only be a single job definition per file.
# Create a job with ID and Name 'example'
job "slskd" {
  constraint {
    attribute = "${attr.cpu.arch}"
    operator  = "!="
    value     = "arm"
  }

  datacenters = ["dc1"]
  type        = "service"

  constraint {
    attribute = "${attr.kernel.name}"
    value     = "linux"
  }
constraint {
    attribute = "${attr.cpu.arch}"
    operator  = "regexp"
    value     = "amd64"
  }

  update {
    stagger      = "10s"
    max_parallel = 1
  }

  group "slskd" {
    count = 1

    restart {
      attempts = 2
      interval = "1m"
      delay    = "10s"
      mode     = "fail"
    }

task "slskd-vpn" {
      driver = "docker"
      lifecycle {
        hook    = "prestart"
        sidecar = true
      }

      config {
        // image = "registry.service.dc1.consul:5000/openpyn:latest"
        // image = "qmcgaw/gluetun"
        image = "qmcgaw/gluetun"

        memory_hard_limit = "1024"
 ports = ["http","https","guac"]

        cap_add = [
          "NET_ADMIN",
          "NET_BIND_SERVICE",
        ]

        #network_mode = "host"
        #network_mode = "vpn"

        volumes = [
          "/etc/localtime:/etc/localtime",
          "/mnt/syncthing/mullvad:/vpn",

        ]
        devices = [
          {
            host_path      = "/dev/net/tun"
            container_path = "/dev/net/tun"
          },
        ]
      }

      env {
      VPN_SERVICE_PROVIDER="airvpn"
      VPN_TYPE="wireguard"
      WIREGUARD_PRIVATE_KEY="SPpgnVCsOnz+zzorzTiOmvDF8GElgp27dSIeYAq43Vk="
      WIREGUARD_PRESHARED_KEY="TBb2gU8pSTSG6lT4QYr7pzNWN7wZEn0yeG4VDTtuy50="
      WIREGUARD_ADDRESSES="10.186.222.247/32"
      SERVER_COUNTRIES="Canada"
      SERVER_CITIES="Montreal"
      FIREWALL_VPN_INPUT_PORTS = "53304"
      HEALTH_TARGET_ADDRESS="1.1.1.1"
      HEALTH_SUCCESS_WAIT_DURATION="30s"
      HEALTH_VPN_DURATION_INITIAL="3600s"
      HEALTH_VPN_DURATION_ADDITION="600s"
      // HEALTH_TARGET_ADDRESS="cloudflare.com:443"
        
        
        ##Mullvad
        #VPNSP                    = "mullvad"
        #VPN_TYPE                 = "wireguard"
        #COUNTRY                  = "Canada"
        #CITY                     = "Toronto"
        #FIREWALL_VPN_INPUT_PORTS = "56987"
        #WIREGUARD_PRIVATE_KEY    = "iA64ImY2XNvml7s+HEHWNNGXeqpzFN0/KYGxhCsHLV8="
        #WIREGUARD_ADDRESS        = "10.64.141.217/32"
        HTTPPROXY                = "on"
        SHADOWSOCKS_PASSWORD     = "farscape5"
        SHADOWSOCKS              = "on"
        DOT_PROVIDERS = "cloudflare,google,quad9,quadrant"
        DOT = "off"
        WEBUI_PORT=8080
      }


      resources {
        cpu    = 100 # 500 MHz
        memory = 250 # 128MB
      }
    } #task ovpn

    task "nicotine" {
      driver = "docker"

      config {
        image = "ghcr.io/fletchto99/nicotine-plus-docker:latest"
        memory_hard_limit = "1024"
        
        network_mode      = "container:slskd-vpn-${NOMAD_ALLOC_ID}"

        volumes = [
          "/mnt/Public/Downloads/news/slskd/config:/config",
           "/mnt/Public/Downloads/news/slskd/shared:/shared",
           "/mnt/Public/Downloads/news/slskd/downloads/:/downloads",
           "/mnt/Public/Downloads/news/slskd/incomplete/:/incomplete",
        ]
      }
      env {
      PUID=1000
      PGID=1000
      TZ="Etc/UTC"
      LISTENING_PORT="53304"
      }
    }


    network {
      // mbits = 100

      port "http" {
        static = 5000
        to     = 5000
      }
      port "https" {
        static = 5001
        to     = 5001
      }
      port "guac" {
        static = 6080
        to     = 6080
      }
    }
  }
}