From 70418bc45b50fc27ec1b9c5b4750988209969fb0 Mon Sep 17 00:00:00 2001
From: Henrik Jess Nielsen <lrihni@egmont.com>
Date: Sat, 9 May 2026 16:48:06 +0200
Subject: [PATCH] =?UTF-8?q?Remove=20host=20volume=20from=20Nomad=20job=20?=
 =?UTF-8?q?=E2=80=94=20unblocks=20placement=20on=20autobox?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The devops-mcp-data host volume is not yet configured on autobox.i80.dk,
causing 'missing compatible host volumes' placement failure.

Comment out the volume + volume_mount blocks so the job can schedule
immediately. Knowledge catalog files are accessed via MCP proxy for now.

Instructions to re-enable (when ready):
  Add to /etc/nomad.d/client.hcl on autobox:
    host_volume "devops-mcp-data" {
      path      = "/opt/devops-mcp/data"
      read_only = false
    }
  Then: mkdir -p /opt/devops-mcp/data && systemctl restart nomad

Also: switch auth to HARBOR_ROBOT_TOKEN pattern (matches devops-mcp.nomad),
add force_pull=true, set provider=consul.
---
 devops-dash.nomad | 61 +++++++++++++++++++++++++++--------------------
 1 file changed, 35 insertions(+), 26 deletions(-)

diff --git a/devops-dash.nomad b/devops-dash.nomad
index e290a84..ed9de8b 100644
--- a/devops-dash.nomad
+++ b/devops-dash.nomad
@@ -14,62 +14,71 @@ job "devops-dash" {
       port "http" {}
     }
 
-    volume "devops-mcp-data" {
-      type      = "host"
-      read_only = true
-      source    = "devops-mcp-data"
-    }
+    # host volume disabled until autobox is configured.
+    # To enable: add to /etc/nomad.d/client.hcl on autobox:
+    #   host_volume "devops-mcp-data" {
+    #     path      = "/opt/devops-mcp/data"
+    #     read_only = false
+    #   }
+    # Then: mkdir -p /opt/devops-mcp/data && systemctl restart nomad
+    #
+    # volume "devops-mcp-data" {
+    #   type      = "host"
+    #   read_only = true
+    #   source    = "devops-mcp-data"
+    # }
 
     task "devops-dash" {
       driver = "docker"
 
-      volume_mount {
-        volume      = "devops-mcp-data"
-        destination = "/data"
-        read_only   = true
-      }
+      # volume_mount {
+      #   volume      = "devops-mcp-data"
+      #   destination = "/data"
+      #   read_only   = true
+      # }
 
       config {
-        image = "registry.i80.dk/gitea/devops-dash:latest"
-        ports = ["http"]
+        image      = "registry.i80.dk/gitea/devops-dash:latest"
+        ports      = ["http"]
+        force_pull = true
 
         auth {
-          username       = "robot$gitserver"
-          password_env   = "REGISTRY_TOKEN"
-          server_address = "registry.i80.dk"
+          username = "robot$gitserver"
+          password = "${HARBOR_ROBOT_TOKEN}"
         }
       }
 
       template {
-        data = <<EOF
-REGISTRY_TOKEN={{ key "harbor/robot/token" }}
-EOF
-        destination = "secrets/env.sh"
+        data = <<EOH
+HARBOR_ROBOT_TOKEN="{{ key "harbor/robot/token" }}"
+EOH
+        destination = "secrets/registry.env"
         env         = true
       }
 
       env {
         PORT           = "${NOMAD_PORT_http}"
+        HOST           = "0.0.0.0"
         REDIS_URL      = "redis://192.168.15.124:6379"
-        DEVOPS_MCP_URL = "http://devops-mcp.i80.dk"
+        DEVOPS_MCP_URL = "https://devops-mcp.i80.dk"
         DATA_DIR       = "/data"
+        PYTHONUNBUFFERED = "1"
       }
 
       resources {
-        cpu    = 100
-        memory = 128
+        cpu    = 200
+        memory = 256
       }
 
       service {
-        name = "devops-dash"
-        port = "http"
+        provider = "consul"
+        name     = "devops-dash"
+        port     = "http"
 
         tags = [
           "traefik.enable=true",
           "traefik.http.routers.devops-dash.rule=Host(`dash.i80.dk`)",
-          "traefik.http.routers.devops-dash.entrypoints=websecure",
           "traefik.http.routers.devops-dash.tls=true",
-          "traefik.http.routers.devops-dash.tls.certresolver=letsencrypt",
         ]
 
         check {