# The name of the Nomad job.
job_name = "vaultwarden"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The Vaultwarden container image.
image = "vaultwarden/server:latest"

# Host port for the Vaultwarden web vault / API. Default 8280 (avoids 8222 used by the nats pack's monitoring).
port = 8280

# Public URL Vaultwarden is served at (e.g. https://vault.example.com). STRONGLY recommended — WebAuthn/U2F, some clients, and the admin page need it correct. Empty = leave unset (works for basic LAN use over the IP).
domain = ""

# Allow open user registration. Set false once your users have signed up (or use invitations from the admin page).
signups_allowed = true

# Argon2/plain token guarding the /admin page. Empty = admin page DISABLED (recommended unless you need it). If set, treat it as a secret.
admin_token = ""

# Docker named volume for /data (SQLite DB, RSA keys, attachments, icon cache). All of Vaultwarden's state — BACK IT UP. Vaultwarden runs as root, so a fresh volume is writable.
data_volume = "vaultwarden_data"

# Placement constraints — pin to one node so the local volume stays put. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# The task resources.
resources = {
    cpu    = 300
    memory = 256
  }