ansible: Reserve ports on a-hel-fi

Author: the-maldridge

ansible/host_vars/a-hel-fi.m.voidlinux.org.yml

@@ -123,3 +123,8 @@ nomad_host_volumes:
   - name: musl_hostdir
     path: /hostdir
     read_only: false
+
+nomad_reserved_ports:
+  - 80  # Legacy nginx on this host
+  - 443 # Legacy nginx on this host
+  - 873 # Externally managed rsync on this host

ansible/roles/nomad-client/templates/40-client.hcl

@@ -1,10 +1,17 @@
-#jinja2: trim_blocks: "true", lstrip_blocks: "true"
+#Jinja2: trim_blocks: "true", lstrip_blocks: "true"
 client {
   enabled = true
   network_interface = "void0"
   cni_path = "/usr/libexec/cni"
   gc_interval = "10m"
 
+  reserved {
+    cpu = 250
+    memory = 512
+
+    reserved_ports = "{{nomad_reserved_ports|default([])|join(",")}}"
+  }
+
   host_volume "netauth_config" {
     path = "/etc/netauth"
     read_only = true