WIP: TiTiler config.

common/cifs-client.nix

@@ -17,14 +17,12 @@ in
   fileSystems."/data/media" = {
     device = "//fractal/media";
     fsType = "cifs";
-    options =
+    options = [ "${automount_opts},credentials=/etc/nixos/smb-secrets" ];
-      [ "${automount_opts},credentials=/etc/nixos/smb-secrets" ];
   };
 
   fileSystems."/data/shared" = {
     device = "//fractal/shared";
     fsType = "cifs";
-    options =
+    options = [ "${automount_opts},credentials=/etc/nixos/smb-secrets" ];
-      [ "${automount_opts},credentials=/etc/nixos/smb-secrets" ];
   };
 }

common/global/backup.nix

@@ -1,8 +1,6 @@
 { pkgs, ... }:
 {
-  environment.systemPackages = [
+  environment.systemPackages = [ pkgs.kopia ];
-    pkgs.kopia
-  ];
 
   #  systemd = {
   #    services = {

common/global/tailscale.nix

@@ -1,4 +1,9 @@
-{ config, pkgs, lib, ... }:
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
 with lib;
 let
   cfg = config.custom.tailscale;

common/impermanence.nix

@@ -1,4 +1,10 @@
-{ pkgs, inputs, lib, config, ... }:
+{
+  pkgs,
+  inputs,
+  lib,
+  config,
+  ...
+}:
 let
   cfg = config.custom.impermanence;
 in

hosts/kopia/default.nix

@@ -6,7 +6,5 @@
   ];
   networking.hostName = "kopia";
 
-  environment.systemPackages = with pkgs; [
+  environment.systemPackages = with pkgs; [ kopia ];
-    kopia
-  ];
 }

services/titiler.hcl

@@ -0,0 +1,44 @@
+job "titiler" {
+  datacenters = ["alo"]
+
+  group "web" {
+    network {
+      port "http" {
+        to = 8000
+      }
+    }
+
+    task "server" {
+      driver = "docker"
+
+      config {
+        image = "ghcr.io/developmentseed/titiler:latest"
+        ports = ["http"]
+        volumes = [
+          "/data/shared/alo_gis/drone_images:/data:ro",
+        ]
+      }
+
+      env {
+        PORT = "8000"
+        WORKERS_PER_CORE = "1"
+      }
+
+      service {
+        name = "titiler"
+        port = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.titiler.entryPoints=websecure",
+          #"traefik.http.routers.titiler.middlewares=authentik@file",
+        ]
+      }
+
+      resources {
+        cpu = 1000
+        memory = 1000
+      }
+    }
+  }
+}

services/traefik.hcl

@@ -12,6 +12,9 @@ job "traefik" {
       port "ssh" {
         static = "2222"
       }
+      port "ntrip" {
+        static = "2101"
+      }
       port "admin" {
         #host_network = "tailscale"
         static = "9002"
@@ -55,7 +58,7 @@ job "traefik" {
 
       config {
         image = "traefik:latest"
-        ports = ["http", "https", "admin", "http4proxy"]
+        ports = ["http", "https", "admin", "http4proxy", "ssh", "ntrip"]
         network_mode = "host"
         volumes = [
           "local/traefik.yml:/etc/traefik/traefik.yml",
@@ -131,6 +134,9 @@ entryPoints:
 
   ssh:
     address: ":{{{ env "NOMAD_PORT_ssh" }}}"
+
+  ntrip:
+    address: ":{{{ env "NOMAD_PORT_ntrip" }}}"
 EOH
         destination = "local/traefik.yml"
         change_mode = "noop"