# The name of the Nomad job.
job_name = "fleet"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The Fleet server container image. Pin a tag in production — Fleet runs schema migrations on start, so an unexpected major upgrade migrates your DB irreversibly.
fleet_image = "fleetdm/fleet:latest"

# Host port for Fleet's UI/API (host networking). Fleet serves plain HTTP here (TLS off) — front it with Traefik/a load balancer for TLS. Pick a free port on the target node.
port = 8080

# Whether Fleet terminates TLS itself. Keep false and terminate TLS at your reverse proxy; set true only if you also supply cert/key files into the container.
server_tls = false

# Optional 32-byte base64 key (openssl rand -base64 32) enabling MDM features and encrypted storage of secrets. Leave empty for basic osquery fleet management. If set, it is baked into the job env — treat it as a secret.
server_private_key = ""

# Resources for the Fleet server task.
fleet_resources = {
    cpu    = 500
    memory = 512
  }

# MySQL image. Fleet requires MySQL 8.0.x (8.0.44+ recommended).
mysql_image = "mysql:8"

# Host port MySQL listens on. Fleet connects to it on 127.0.0.1 (same host network namespace).
mysql_port = 3306

# Database name Fleet uses.
mysql_database = "fleet"

# Application DB user Fleet connects as.
mysql_username = "fleet"

# Password for the application DB user. CHANGE THIS.
mysql_password = "fleet"

# MySQL root password (used to bootstrap the instance). CHANGE THIS.
mysql_root_password = "fleet"

# Docker named volume for /var/lib/mysql. A fresh volume inherits the image's data-dir ownership so MySQL can write it. This is the only truly critical state — back it up.
mysql_data_volume = "fleet_mysql_data"

# Resources for the MySQL task.
mysql_resources = {
    cpu    = 500
    memory = 1024
  }

# Redis image. Fleet supports Redis 6/7.
redis_image = "redis:7"

# Host port Redis listens on. Fleet connects to it on 127.0.0.1 (same host network namespace).
redis_port = 6379

# Docker named volume for Redis /data (AOF). Redis holds only live/query state — losing it is not fatal, but persisting avoids a cold cache on reschedule.
redis_data_volume = "fleet_redis_data"

# Resources for the Redis task.
redis_resources = {
    cpu    = 200
    memory = 256
  }

# Placement constraints — pin the job to one node so the MySQL/Redis local volumes stay put (this pack runs a single all-in-one alloc). On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []