352 lines
8.6 KiB
HCL
352 lines
8.6 KiB
HCL
job "qbittorrent" {
|
|
# region = "global"
|
|
datacenters = ["dc1"]
|
|
type = "service"
|
|
|
|
|
|
constraint {
|
|
attribute = "${attr.kernel.name}"
|
|
value = "linux"
|
|
}
|
|
constraint {
|
|
attribute = "${attr.cpu.arch}"
|
|
operator = "regexp"
|
|
value = "amd64"
|
|
}
|
|
update {
|
|
# Stagger updates every 60 seconds
|
|
stagger = "90s"
|
|
max_parallel = 1
|
|
healthy_deadline = "2m"
|
|
health_check = "task_states"
|
|
|
|
}
|
|
|
|
group "qbittorrent" {
|
|
count = 1
|
|
|
|
restart {
|
|
attempts = 8
|
|
interval = "20m"
|
|
delay = "10s"
|
|
mode = "delay"
|
|
}
|
|
|
|
task "qbittorrent-vpn" {
|
|
driver = "docker"
|
|
lifecycle {
|
|
hook = "prestart"
|
|
sidecar = true
|
|
}
|
|
|
|
config {
|
|
// image = "registry.service.dc1.consul:5000/openpyn:latest"
|
|
// image = "qmcgaw/gluetun"
|
|
image = "qmcgaw/gluetun"
|
|
|
|
memory_hard_limit = "1024"
|
|
ports = [
|
|
"shadowsocks",
|
|
"http_proxy",
|
|
"http_admin",
|
|
"qbittorrent_51413",
|
|
"qbittorrent_80",
|
|
"socks"
|
|
]
|
|
|
|
cap_add = [
|
|
"NET_ADMIN",
|
|
"NET_BIND_SERVICE",
|
|
]
|
|
|
|
#network_mode = "host"
|
|
#network_mode = "vpn"
|
|
|
|
volumes = [
|
|
"/etc/localtime:/etc/localtime",
|
|
"/mnt/syncthing/mullvad:/vpn",
|
|
"local/gluetun.toml:/gluetun/config.toml"
|
|
|
|
]
|
|
devices = [
|
|
{
|
|
host_path = "/dev/net/tun"
|
|
container_path = "/dev/net/tun"
|
|
},
|
|
]
|
|
|
|
}
|
|
|
|
|
|
template {
|
|
data = <<EOH
|
|
[[roles]]
|
|
name = "qbittorrent"
|
|
# Define a list of routes with the syntax "Http-Method /path"
|
|
routes = ["GET /v1/openvpn/status", "PUT /v1/openvpn/status", "PUT /v1/openvpn/status", "GET /v1/openvpn/portforwarded", "GET /v1/openvpn/settings", "GET /v1/dns/status", "PUT /v1/dns/status", "PUT /v1/dns/status", "GET /v1/updater/status", "PUT /v1/updater/status", "PUT /v1/updater/status", "GET /v1/publicip/ip", "GET /v1/version", "GET /v1/vpn/status", "PUT /v1/vpn/status", "GET /v1/vpn/settings", "PUT /v1/vpn/settings"]
|
|
auth = "none"
|
|
EOH
|
|
|
|
destination = "custom/auth.toml"
|
|
}
|
|
|
|
|
|
env {
|
|
VPN_SERVICE_PROVIDER="airvpn"
|
|
VPN_TYPE="wireguard"
|
|
WIREGUARD_PRIVATE_KEY="EIos1A9eGCIoCHr02aOsEu8S4C0gqhNLIYF/vMykEV0="
|
|
WIREGUARD_PRESHARED_KEY="RzPcraPA24hLFxGiB7z5JMWrtI+JBbEzvmeiEX36XWo="
|
|
WIREGUARD_ADDRESSES="10.161.31.240/32"
|
|
SERVER_COUNTRIES="Canada"
|
|
SERVER_CITIES="Vancouver,Montreal,Toronto"
|
|
FIREWALL_VPN_INPUT_PORTS = "61944,53304"
|
|
HEALTH_TARGET_ADDRESS="1.1.1.1"
|
|
HEALTH_SUCCESS_WAIT_DURATION="30s"
|
|
HEALTH_VPN_DURATION_INITIAL="3600s"
|
|
HEALTH_VPN_DURATION_ADDITION="600s"
|
|
HTTP_CONTROL_SERVER_AUTH_CONFIG_FILEPATH="/custom/auth.toml"
|
|
// HEALTH_TARGET_ADDRESS="cloudflare.com:443"
|
|
|
|
|
|
##Mullvad
|
|
#VPNSP = "mullvad"
|
|
#VPN_TYPE = "wireguard"
|
|
#COUNTRY = "Canada"
|
|
#CITY = "Toronto"
|
|
#FIREWALL_VPN_INPUT_PORTS = "56987"
|
|
#WIREGUARD_PRIVATE_KEY = "iA64ImY2XNvml7s+HEHWNNGXeqpzFN0/KYGxhCsHLV8="
|
|
#WIREGUARD_ADDRESS = "10.64.141.217/32"
|
|
HTTPPROXY = "on"
|
|
SHADOWSOCKS_PASSWORD = "farscape5"
|
|
SHADOWSOCKS = "on"
|
|
DOT_PROVIDERS = "cloudflare,google,quad9,quadrant"
|
|
DOT = "off"
|
|
WEBUI_PORT=8080
|
|
}
|
|
|
|
service {
|
|
name = "qbittorrent"
|
|
tags = ["global", "tools"]
|
|
port = "qbittorrent_80"
|
|
}
|
|
|
|
service {
|
|
name = "${TASKGROUP}-admin"
|
|
tags = ["global"]
|
|
port = "http_admin"
|
|
}
|
|
service {
|
|
name = "sp"
|
|
tags = ["global", "ovpn-openpyn",
|
|
"enable_gocast",
|
|
"gocast_vip=192.168.1.242/32",
|
|
"gocast_nat=tcp:1080:1080",
|
|
"gocast_nat=udp:1080:1080",
|
|
]
|
|
port = "socks"
|
|
}
|
|
|
|
resources {
|
|
cpu = 100 # 500 MHz
|
|
memory = 250 # 128MB
|
|
}
|
|
} #task ovpn
|
|
|
|
task "dante" {
|
|
driver = "docker"
|
|
|
|
config {
|
|
image = "serjs/go-socks5-proxy"
|
|
// image = "ghcr.io/sstent/dante-wg:latest"
|
|
network_mode = "container:qbittorrent-vpn-${NOMAD_ALLOC_ID}"
|
|
memory_hard_limit = 256
|
|
|
|
devices = [
|
|
{
|
|
host_path = "/dev/net/tun"
|
|
container_path = "/dev/net/tun"
|
|
},
|
|
]
|
|
}
|
|
env {REQUIRE_AUTH="false"}
|
|
resources {
|
|
cpu = 64 # 500 MHz
|
|
memory = 128 # 128MB
|
|
}
|
|
} #end dante
|
|
|
|
|
|
# task "init" {
|
|
# driver = "docker"
|
|
# lifecycle {
|
|
# hook = "prestart"
|
|
# sidecar = false
|
|
# }
|
|
# config {
|
|
# memory_hard_limit = "2048"
|
|
|
|
# image = "ghcr.io/sstent/rsync"
|
|
# volumes = [
|
|
# "/mnt/configs/${NOMAD_GROUP_NAME}:/config",
|
|
# "/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
|
|
# "/mnt/Public/config/locks:/locks"
|
|
# ]
|
|
|
|
# args = ["flock", "-x", "/locks/${NOMAD_GROUP_NAME}_rsync.lock", "rsync", "-av", "/configbackup/", "/config/", "--delete-before"]
|
|
# }
|
|
# resources {
|
|
# cpu = 20 # 500 MHz
|
|
# memory = 20 # 128MB
|
|
# }
|
|
# }
|
|
|
|
|
|
# task "finalsync" {
|
|
# driver = "docker"
|
|
# lifecycle {
|
|
# hook = "poststop"
|
|
# }
|
|
# config {
|
|
# memory_hard_limit = "2048"
|
|
|
|
# image = "ghcr.io/sstent/rsync"
|
|
# volumes = [
|
|
# "/mnt/configs/${NOMAD_GROUP_NAME}:/config",
|
|
# "/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
|
|
# "/mnt/Public/config/locks:/locks"
|
|
# ]
|
|
|
|
# args = ["flock", "-x", "/locks/${NOMAD_GROUP_NAME}_rsync.lock", "rsync", "-av", "--delete", "/config/", "/configbackup/"]
|
|
# }
|
|
# resources {
|
|
# cpu = 20 # 500 MHz
|
|
# memory = 128 # 128MB
|
|
# }
|
|
# }
|
|
|
|
|
|
# task "sync" {
|
|
# driver = "docker"
|
|
# lifecycle {
|
|
# hook = "poststart"
|
|
# sidecar = true
|
|
# }
|
|
# config {
|
|
# memory_hard_limit = "2048"
|
|
|
|
# image = "ghcr.io/sstent/rsync"
|
|
# volumes = [
|
|
# "/mnt/configs/:/configs",
|
|
# "/mnt/Public/config/${NOMAD_GROUP_NAME}:/configbackup",
|
|
# ]
|
|
# args = ["client"]
|
|
# }
|
|
# env {
|
|
# CRON_TASK_1 = "25 8-20 * * * chmod a-w /configs/${NOMAD_GROUP_NAME}/ ; rsync -avz --delete /configs/${NOMAD_GROUP_NAME}/ /configbackup/; chmod a+w /configs/${NOMAD_GROUP_NAME}/;"
|
|
|
|
# }
|
|
# resources {
|
|
# cpu = 20 # 500 MHz
|
|
# memory = 20 # 128MB
|
|
# }
|
|
# } #end sync
|
|
|
|
|
|
task "qbittorrent" {
|
|
driver = "docker"
|
|
|
|
// "/mnt/Public/config/qbittorrent:/config",
|
|
config {
|
|
image = "linuxserver/qbittorrent:5.1.0"
|
|
network_mode = "container:qbittorrent-vpn-${NOMAD_ALLOC_ID}"
|
|
memory_hard_limit = 2048
|
|
|
|
#cpuset_cpus = "4-7"
|
|
|
|
volumes = [
|
|
"/mnt/Public/Downloads/news/qbittorrent:/downloads/",
|
|
"/mnt/configs/qbittorrent:/config",
|
|
"/mnt/Archive/seeding:/archiveseeding",
|
|
"/mnt/odroid5:/odroid5",
|
|
]
|
|
// ulimit {
|
|
// nproc = "4242"
|
|
// nofile = "2048:4096"
|
|
// }
|
|
sysctl = {
|
|
"net.core.somaxconn" = "4096"
|
|
}
|
|
}
|
|
env {
|
|
TZ = "EST5EDT"
|
|
PUID = 1000
|
|
PGID = 1000
|
|
WEBUI_PORT=8080
|
|
}
|
|
service {
|
|
name = "qb"
|
|
tags = ["global", "ovpn-openpyn",
|
|
"enable_gocast",
|
|
"gocast_vip=192.168.1.244/32",
|
|
"gocast_nat=tcp:8080:8080",
|
|
"gocast_nat=udp:8080:8080"
|
|
]
|
|
port = "qbittorrent_80"
|
|
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
#!/bin/bash
|
|
curl -sL http://127.0.0.1:8080/api/v2/transfer/info | grep connected || exit;
|
|
EOH
|
|
|
|
destination = "local/qbithealth.sh"
|
|
change_mode = "noop"
|
|
perms = "0777"
|
|
}
|
|
|
|
resources {
|
|
cpu = 128 # 500 MHz
|
|
memory = 256 # 128MB
|
|
}
|
|
} #task resilio-sync
|
|
|
|
network {
|
|
// mode = "bridge"
|
|
port "qbittorrent_51413" {
|
|
static = 6881
|
|
to = 6881
|
|
}
|
|
|
|
port "shadowsocks" {
|
|
static = "8388"
|
|
to = "8388"
|
|
}
|
|
port "socks" {
|
|
static = "1080"
|
|
to = "1080"
|
|
}
|
|
|
|
port "http_proxy" {
|
|
static = "8888"
|
|
to = "8888"
|
|
}
|
|
port "http_admin" {
|
|
static = "8000"
|
|
to = "8000"
|
|
}
|
|
|
|
|
|
port "qbittorrent_80" {
|
|
static = 8080
|
|
to = 8080
|
|
}
|
|
|
|
}
|
|
} #group "au-proxy"
|
|
}
|
|
|
|
// }
|
|
|