job "moneycapp-tink-demo" {
  datacenters = ["dc1"]
  type        = "service"

  group "demo" {
    count = 1

    network {
      port "http" { to = 8000 }
    }

    service {
      name = "moneycapp-tink-demo"
      port = "http"
      tags = ["traefik.enable=true",
              "traefik.http.routers.tink-demo.rule=Host(`tink-demo.i80.dk`)"]
      check {
        type     = "http"
        path     = "/"
        interval = "30s"
        timeout  = "5s"
      }
    }

    task "app" {
      driver = "docker"

      config {
        image = "registry.i80.dk/moneycapp-tink-demo:latest"
        ports = ["http"]
      }

      env {
        TINK_REDIRECT_URI = "https://tink-demo.i80.dk/callback"
        APP_BASE_URL      = "https://tink-demo.i80.dk"
        TINK_API_BASE     = "https://api.tink.com"
        TINK_LINK_BASE    = "https://link.tink.com"
      }

      template {
        data = <<EOF
{{ with secret "secret/moneycapp-tink-demo" }}
TINK_CLIENT_ID={{ .Data.data.client_id }}
TINK_CLIENT_SECRET={{ .Data.data.client_secret }}
SESSION_SECRET={{ .Data.data.session_secret }}
{{ end }}
EOF
        destination = "secrets/env"
        env         = true
      }

      resources {
        cpu    = 256
        memory = 256
      }
    }
  }
}