From c97a5583535f411660b907d1e86a3496faf364ee Mon Sep 17 00:00:00 2001
From: Ben Martin <ben@brmartin.co.uk>
Date: Wed, 18 Dec 2024 15:43:40 +0000
Subject: [PATCH] feat(elk): add Traefik configuration for Elasticsearch
 service

---
 modules/elk/jobspec.nomad.hcl | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/modules/elk/jobspec.nomad.hcl b/modules/elk/jobspec.nomad.hcl
index 07e99dc..d8eef7e 100644
--- a/modules/elk/jobspec.nomad.hcl
+++ b/modules/elk/jobspec.nomad.hcl
@@ -82,6 +82,16 @@ job "elk" {
         name     = "elk-node-elasticsearch-http"
         provider = "consul"
         port     = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.es.rule=Host(`es.brmartin.co.uk`)",
+          "traefik.http.routers.es.entrypoints=websecure",
+          "traefik.http.routers.es.service=es",
+          "traefik.http.services.es.loadbalancer.serversTransport=es",
+          "traefik.http.serversTransports.es.rootCAs=[\"/etc/traefik/rootca/elasticsearch.crt\"]",
+          "traefik.http.serversTransports.es.insecureSkipVerify=true", # TODO: Hostname verification will fail without this
+        ]
       }
 
       service {