job "couchdb" {
  datacenters = ["alo"]

  group "db" {
    network {
      port "api" {
        to = 5984
      }
    }

    task "server" {
      driver = "docker"

      config {
        image = "couchdb:3.3"
        ports = ["api"]
        volumes = [
          "/data/compute/appdata/couchdb:/opt/couchdb/data",
          "local/couchdb.ini:/opt/couchdb/etc/local.d/local.ini",
          "local/vm.args:/opt/couchdb/etc/vm.args",
        ]
      }

      service {
        name = "couchdb"
        port = "api"

        tags = [
          "traefik.enable=true",
          "traefik.http.routers.couchdb.entryPoints=websecure",
          "traefik.http.routers.couchdb.rule=Host(`pidb.paler.net`)",
        ]
      }

      template {
        data = <<EOH
# (Debian) Package-introduced administrative user
[admins]
admin = -pbkdf2-eeb3e20eb9b58edec62d10987d7aed3465c425d4,3cf6e90591d435fbfa9262693490b9c8,10

[couchdb]
uuid = 66ab957b6c21d9fd2ff6bda36da9f4b7

[couch_httpd_auth]
secret = a57bfaa045b960c301411bb0893d88ac
allow_persistent_cookies = true
; 8 weeks
timeout = 4838400

[cors]
origins = https://pi.paler.net,https://noteself.org
credentials = true
headers = accept, authorization, content-type, origin, referer
methods = GET, PUT, POST, HEAD, DELETE

[httpd]
enable_cors = true
EOH
        destination = "local/couchdb.ini"
      }

      template {
        data = <<EOH
-name couchdb@127.0.0.1

# All nodes must share the same magic cookie for distributed Erlang to work.
# Comment out this line if you synchronized the cookies by other means (using
# the ~/.erlang.cookie file, for example).
#-setcookie monster

# Tell kernel and SASL not to log anything
-kernel error_logger silent
-sasl sasl_error_logger false

# Use kernel poll functionality if supported by emulator
+K true

# Start a pool of asynchronous IO threads
+A 16

# Comment this line out to enable the interactive Erlang shell on startup
+Bd -noinput

# Force use of the smp scheduler, fixes #1296
-smp enable

# Set maximum SSL session lifetime to reap terminated replication readers
-ssl session_lifetime 300
EOH
        destination = "local/vm.args"
      }
    }
  }
}