services/nomad/mirror: Enable rsync on mirrors

Author: the-maldridge

ansible/hashi-worker.yml

@@ -27,6 +27,7 @@
         - "*filter"
         - "-A INPUT -p tcp --dport 80 -j ACCEPT"
         - "-A INPUT -p tcp --dport 443 -j ACCEPT"
+        - "-A INPUT -p tcp --dport 873 -j ACCEPT"
         - "COMMIT"
 
 - hosts: hashimx

services/nomad/infrastructure/traefik.nomad

@@ -38,6 +38,7 @@ job "traefik" {
 
       config {
         image = "traefik:2.5.3"
+        ports = ["http", "https", "traefik"]
 
         args = [
           "--api.dashboard",

services/nomad/mirror/mirror.nomad

@@ -3,10 +3,14 @@ job "mirror" {
   datacenters = ["VOID-MIRROR"]
   namespace = "mirror"
 
-  group "http" {
+  group "services" {
     network {
       mode = "bridge"
       port "http" { to = 80 }
+      port "rsync" {
+        to = 873
+        static = 873
+      }
     }
 
     volume "root-mirror" {
@@ -30,12 +34,39 @@ job "mirror" {
 
       config {
         image = "ghcr.io/void-linux/infra-nginx:v20210926rc01"
+        ports = ["http"]
       }
 
       volume_mount {
         volume = "root-mirror"
         destination = "/srv/www"
       }
     }
+
+    task "rsync" {
+      driver = "docker"
+
+      config {
+        image = "ghcr.io/void-linux/infra-rsync:v20210926rc01"
+        ports = ["rsync"]
+        volumes = ["local/voidmirror.conf:/etc/rsyncd.conf.d/voidmirror.conf"]
+      }
+
+      volume_mount {
+        volume = "root-mirror"
+        destination = "/srv/rsync"
+      }
+
+      template {
+        data = <<EOF
+[voidlinux]
+comment = Main Void Repository
+path = /srv/rsync
+read only = yes
+list = yes
+EOF
+        destination = "local/voidmirror.conf"
+      }
+    }
   }
 }