285 lines
7.9 KiB
HCL
285 lines
7.9 KiB
HCL
terraform {
|
|
required_providers {
|
|
coder = {
|
|
source = "coder/coder"
|
|
version = "~> 0.8.3"
|
|
}
|
|
docker = {
|
|
source = "kreuzwerker/docker"
|
|
version = "~> 3.0.1"
|
|
}
|
|
}
|
|
}
|
|
|
|
locals {
|
|
username = data.coder_workspace.me.owner
|
|
}
|
|
|
|
data "coder_provisioner" "me" {
|
|
}
|
|
|
|
provider "docker" {
|
|
}
|
|
|
|
data "coder_workspace" "me" {
|
|
}
|
|
|
|
data "coder_git_auth" "github" {
|
|
# Matches the ID of the git auth provider in Coder.
|
|
id = "primary-github"
|
|
}
|
|
|
|
resource "coder_app" "boop" {
|
|
agent_id = coder_agent.main.id
|
|
slug = "boop"
|
|
display_name = "B.O.O.P."
|
|
icon = "https://media.furality.online/boop/furality.png"
|
|
url = "http://localhost:3123"
|
|
share = "public"
|
|
subdomain = false
|
|
}
|
|
|
|
|
|
resource "coder_agent" "main" {
|
|
arch = data.coder_provisioner.me.arch
|
|
os = "linux"
|
|
|
|
startup_script_timeout = 180
|
|
startup_script = <<-EOT
|
|
set -e
|
|
|
|
# start the services
|
|
echo "[SETUP] Starting core services (sql and redis)"
|
|
sudo service mysql start 2>&1 /dev/null
|
|
sudo service redis-server start 2>&1 /dev/null
|
|
echo "[SETUP] Core services started"
|
|
|
|
if [ ! -f ~/.coder-env ]; then
|
|
echo "[SETUP] Creating ~/.coder-env"
|
|
echo "WORKSPACE_ENV=$WORKSPACE_ENV" >> ~/.coder-env
|
|
echo "USERNAME_ENV=$USERNAME_ENV" >> ~/.coder-env
|
|
echo "[SETUP] Created ~/.coder-env"
|
|
fi
|
|
|
|
if [ ! -d ~/oauth-provider ]; then
|
|
echo "[SETUP] Cloning Github Repo"
|
|
git clone https://github.com/furality/oauth-provider/
|
|
cp ~/oauth-provider/.env.example ~/oauth-provider/.env
|
|
echo "@fortawesome:registry=https://npm.fontawesome.com/" > ~/oauth-provider/.npmrc
|
|
echo "//npm.fontawesome.com/:_authToken=CEDBD954-ED84-4701-B22E-416075856EB4" > ~/oauth-provider/.npmrc
|
|
|
|
echo "[SETUP] Downloading test keys from git"
|
|
mkdir ~/oauth-provider/keys
|
|
wget -q -O ~/oauth-provider/keys/cookies.json https://git.kakio.us/kakious/docker-images/raw/branch/main/boop-keys/cookies.json
|
|
wget -q -O ~/oauth-provider/keys/jwks.json https://git.kakio.us/kakious/docker-images/raw/branch/main/boop-keys/jwks.json
|
|
|
|
echo "[SETUP] Git Keys imported"
|
|
|
|
|
|
echo "Downloading setup script from git"
|
|
wget -q -O ~/setup-script.sh https://git.kakio.us/kakious/docker-images/raw/branch/main/boop-keys/setup-boop.sh
|
|
echo "[SETUP] Downloaded setup script from git"
|
|
chmod +x ~/setup-script.sh
|
|
|
|
echo "[SETUP] Running Setup Script"
|
|
sudo ./setup-script.sh 2>&1 /dev/null
|
|
echo "[SETUP] Setup Script Done"
|
|
cd ~/oauth-provider
|
|
|
|
echo "[SETUP] Downloading NPM packages"
|
|
npm i --loglevel=error
|
|
sudo npm -g i node-ts --loglevel=errpr
|
|
|
|
echo "[SETUP] Running TypeORM Migrations"
|
|
npm run typeorm:run-migrations
|
|
echo "[SETUP] Deleting DB Setup Script"
|
|
rm -rf ~/setup-script.sh
|
|
fi
|
|
|
|
echo "[SETUP] Setup Complete"
|
|
EOT
|
|
|
|
env = {
|
|
GIT_AUTHOR_NAME = "${data.coder_workspace.me.owner}"
|
|
GIT_COMMITTER_NAME = "${data.coder_workspace.me.owner}"
|
|
GIT_AUTHOR_EMAIL = "${data.coder_workspace.me.owner_email}"
|
|
GIT_COMMITTER_EMAIL = "${data.coder_workspace.me.owner_email}"
|
|
GITHUB_TOKEN = "${data.coder_git_auth.github.access_token}"
|
|
WORKSPACE_ENV = "${data.coder_workspace.me.name}"
|
|
USERNAME_ENV = "${data.coder_workspace.me.owner}"
|
|
}
|
|
|
|
metadata {
|
|
display_name = "CPU Usage"
|
|
key = "0_cpu_usage"
|
|
script = "coder stat cpu"
|
|
interval = 10
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "RAM Usage"
|
|
key = "1_ram_usage"
|
|
script = "coder stat mem"
|
|
interval = 10
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "Home Disk"
|
|
key = "3_home_disk"
|
|
script = "coder stat disk --path $${HOME}"
|
|
interval = 60
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "CPU Usage (Host)"
|
|
key = "4_cpu_usage_host"
|
|
script = "coder stat cpu --host"
|
|
interval = 10
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "Memory Usage (Host)"
|
|
key = "5_mem_usage_host"
|
|
script = "coder stat mem --host"
|
|
interval = 10
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "Load Average (Host)"
|
|
key = "6_load_host"
|
|
# get load avg scaled by number of cores
|
|
script = <<EOT
|
|
echo "`cat /proc/loadavg | awk '{ print $1 }'` `nproc`" | awk '{ printf "%0.2f", $1/$2 }'
|
|
EOT
|
|
interval = 60
|
|
timeout = 1
|
|
}
|
|
|
|
metadata {
|
|
display_name = "Swap Usage (Host)"
|
|
key = "7_swap_host"
|
|
script = <<EOT
|
|
free -b | awk '/^Swap/ { printf("%.1f/%.1f", $3/1024.0/1024.0/1024.0, $2/1024.0/1024.0/1024.0) }'
|
|
EOT
|
|
interval = 10
|
|
timeout = 1
|
|
}
|
|
}
|
|
|
|
resource "docker_volume" "home_volume" {
|
|
name = "coder-${data.coder_workspace.me.id}-home"
|
|
# Protect the volume from being deleted due to changes in attributes.
|
|
lifecycle {
|
|
ignore_changes = all
|
|
}
|
|
# Add labels in Docker to keep track of orphan resources.
|
|
labels {
|
|
label = "coder.owner"
|
|
value = data.coder_workspace.me.owner
|
|
}
|
|
labels {
|
|
label = "coder.owner_id"
|
|
value = data.coder_workspace.me.owner_id
|
|
}
|
|
labels {
|
|
label = "coder.workspace_id"
|
|
value = data.coder_workspace.me.id
|
|
}
|
|
# This field becomes outdated if the workspace is renamed but can
|
|
# be useful for debugging or cleaning out dangling volumes.
|
|
labels {
|
|
label = "coder.workspace_name_at_creation"
|
|
value = data.coder_workspace.me.name
|
|
}
|
|
}
|
|
|
|
resource "docker_volume" "data_volume" {
|
|
name = "coder-${data.coder_workspace.me.id}-data"
|
|
# Protect the volume from being deleted due to changes in attributes.
|
|
lifecycle {
|
|
ignore_changes = all
|
|
}
|
|
# Add labels in Docker to keep track of orphan resources.
|
|
labels {
|
|
label = "coder.owner"
|
|
value = data.coder_workspace.me.owner
|
|
}
|
|
labels {
|
|
label = "coder.owner_id"
|
|
value = data.coder_workspace.me.owner_id
|
|
}
|
|
labels {
|
|
label = "coder.workspace_id"
|
|
value = data.coder_workspace.me.id
|
|
}
|
|
# This field becomes outdated if the workspace is renamed but can
|
|
# be useful for debugging or cleaning out dangling volumes.
|
|
labels {
|
|
label = "coder.workspace_name_at_creation"
|
|
value = data.coder_workspace.me.name
|
|
}
|
|
}
|
|
|
|
data "docker_registry_image" "main" {
|
|
name = "git.kakio.us/kakious/coder-backend:latest"
|
|
}
|
|
|
|
resource "docker_image" "main" {
|
|
name = data.docker_registry_image.main.name
|
|
pull_triggers = [data.docker_registry_image.main.sha256_digest]
|
|
force_remove = false
|
|
keep_locally = true
|
|
}
|
|
|
|
resource "docker_container" "workspace" {
|
|
count = data.coder_workspace.me.start_count
|
|
image = docker_image.main.name
|
|
# Uses lower() to avoid Docker restriction on container names.
|
|
name = "${data.coder_workspace.me.owner}-${lower(data.coder_workspace.me.name)}"
|
|
# Hostname makes the shell more user friendly: coder@my-workspace:~$
|
|
hostname = data.coder_workspace.me.name
|
|
memory = "4098"
|
|
memory_swap = "-1"
|
|
# Use the docker gateway if the access URL is 127.0.0.1
|
|
entrypoint = ["sh", "-c", replace(coder_agent.main.init_script, "/localhost|127\\.0\\.0\\.1/", "host.docker.internal")]
|
|
env = ["CODER_AGENT_TOKEN=${coder_agent.main.token}"]
|
|
host {
|
|
host = "host.docker.internal"
|
|
ip = "host-gateway"
|
|
}
|
|
volumes {
|
|
container_path = "/home/coder"
|
|
volume_name = docker_volume.home_volume.name
|
|
read_only = false
|
|
}
|
|
|
|
volumes {
|
|
container_path = "/data"
|
|
volume_name = docker_volume.data_volume.name
|
|
read_only = false
|
|
}
|
|
# Add labels in Docker to keep track of orphan resources.
|
|
labels {
|
|
label = "coder.owner"
|
|
value = data.coder_workspace.me.owner
|
|
}
|
|
labels {
|
|
label = "coder.owner_id"
|
|
value = data.coder_workspace.me.owner_id
|
|
}
|
|
labels {
|
|
label = "coder.workspace_id"
|
|
value = data.coder_workspace.me.id
|
|
}
|
|
labels {
|
|
label = "coder.workspace_name"
|
|
value = data.coder_workspace.me.name
|
|
}
|
|
}
|
|
|
|
|