Added D53 and Diplonat

apps/core/d53.hcl

@@ -0,0 +1,45 @@
+job "d53" {
+  datacenters = ["mayel-house", "gribse-house", "zuma-house"]
+  type = "service"
+  priority = 90
+
+  group "D53" {
+    count = 1
+
+    task "d53" {
+      driver = "docker"
+
+      config {
+        image = "git.shenanigans.cc/zuma/d53:41e79af-dirty"
+        network_mode = "host"
+        readonly_rootfs = true
+      }
+
+      resources {
+        cpu = 100
+        memory = 100
+      }
+
+      restart {
+        interval = "3m"
+        attempts = 10
+        delay    = "15s"
+        mode     = "delay"
+      }
+
+      template {
+        data = <<EOH
+D53_CONSUL_HOST=http://localhost:8500
+D53_PROVIDERS=chokbar.bzh:porkbun
+D53_PORKBUN_API_KEY={{ key "secrets/d53/porkbun_api_key" }}
+D53_PORKBUN_SECRET_API_KEY={{ key "secrets/d53/porkbun_secret_api_key" }}
+D53_ALLOWED_DOMAINS=chokbar.bzh
+RUST_LOG=d53=debug
+EOH
+        destination = "secrets/env"
+        env = true
+      }
+    }
+  }
+}
+

apps/core/diplonat.hcl

@@ -0,0 +1,52 @@
+job "diplonat" {
+  datacenters = ["zuma-house", "mayel-house", "gribse-house"]
+  type = "system"
+  priority = 90
+
+  update {
+    max_parallel = 2
+    stagger = "1m"
+  }
+
+  group "diplonat" {
+    task "diplonat" {
+      driver = "docker"
+
+      config {
+        image = "git.shenanigans.cc/zuma/diplonat:filouterie"
+        network_mode = "host"
+        readonly_rootfs = true
+        privileged = true
+      }
+
+      restart {
+        interval = "5m"
+        attempts = 10
+        delay    = "15s"
+        mode     = "delay"
+      }
+
+      template {
+        data = <<EOH
+DIPLONAT_REFRESH_TIME=60
+DIPLONAT_EXPIRATION_TIME=300
+DIPLONAT_DISABLE_IGD=true
+DIPLONAT_STUN_SERVER=stun.l.google.com:19302
+DIPLONAT_CONSUL_NODE_NAME={{ env "attr.unique.hostname" }}
+DIPLONAT_CONSUL_URL=http://consul.service.filouterie.consul:8500
+DIPLONAT_CONSUL_TLS_SKIP_VERIFY=true
+RUST_LOG=debug
+RUST_BACKTRACE=1
+EOH
+        destination = "secrets/env"
+        env = true
+      }
+
+      resources {
+        memory = 100
+        memory_max = 200
+      }
+    }
+  }
+}
+

apps/core/tricot.hcl

@@ -71,7 +71,9 @@ EOH
         name = "tricot-http"
         port = "http_port"
         tags = [
-          "${meta.site}"
+          "${meta.site}",
+          "d53-a global.site.chokbar.bzh",
+          "d53-a ${meta.site}.site.chokbar.bzh",
          ]
         address_mode = "host"
       }

apps/searxng/searxng.hcl

@@ -24,7 +24,8 @@ job "searxng" {
 
       service {
         tags = [
-          "tricot search.chokbar.bzh"
+          "tricot search.chokbar.bzh",
+          "d53-cname search.chokbar.bzh"
         ]
         name = "searxng"
         port = "http_port"