Use dedicated Redis service

Author: kberzinch

.nomad/apiary.nomad

@@ -75,6 +75,10 @@ job "apiary" {
   type = "service"
 
   group "apiary" {
+    network {
+      port "resp" {}
+    }
+
     volume "run" {
       type = "host"
       source = "run"
@@ -378,6 +382,97 @@ EOF
         }
       }
     }
+
+    dynamic "task" {
+      for_each = var.run_background_containers ? ["redis"] : []
+
+      labels = [task.value]
+
+      content {
+        driver = "docker"
+
+        lifecycle {
+          hook = "prestart"
+          sidecar = true
+        }
+
+        config {
+          image = "redis"
+
+          args = [
+            "/usr/local/etc/redis/redis.conf"
+          ]
+
+          force_pull = true
+
+          network_mode = "host"
+
+          mount {
+            type   = "bind"
+            source = "secrets/"
+            target = "/usr/local/etc/redis/"
+          }
+        }
+
+        resources {
+          cpu = 100
+          memory = 256
+          memory_max = 2048
+        }
+
+        template {
+          data = <<EOH
+  bind 127.0.0.1
+  port {{ env "NOMAD_PORT_resp" }}
+  unixsocket /alloc/tmp/redis.sock
+  unixsocketperm 777
+  requirepass {{ env "NOMAD_ALLOC_ID" }}
+  maxmemory {{ env "NOMAD_MEMORY_MAX_LIMIT" }}mb
+  maxmemory-policy allkeys-lru
+  EOH
+
+          destination = "secrets/redis.conf"
+        }
+
+        service {
+          name = "${NOMAD_JOB_NAME}-redis"
+
+          port = "resp"
+
+          address = "127.0.0.1"
+
+          tags = [
+            "resp"
+          ]
+
+          check {
+            success_before_passing = 3
+            failures_before_critical = 2
+
+            interval = "5s"
+
+            name = "TCP"
+            port = "resp"
+            timeout = "1s"
+            type = "tcp"
+          }
+
+          check_restart {
+            limit = 5
+            grace = "20s"
+          }
+        }
+
+        restart {
+          attempts = 5
+          delay = "10s"
+          interval = "1m"
+          mode = "fail"
+        }
+
+        shutdown_delay = "60s"
+      }
+    }
   }
 
   reschedule {

.nomad/conf/.env.tpl

@@ -11,13 +11,6 @@ CAS_ENABLE_SAML="false"
 {{- range service "mysql" }}
 DB_SOCKET="{{- index .ServiceMeta "socket" | trimSpace -}}"
 {{ end }}
-REDIS_CLIENT="phpredis"
-REDIS_SCHEME="null"
-REDIS_PORT="-1"
-{{- range service "redis" }}
-REDIS_HOST="{{- index .ServiceMeta "socket" | trimSpace -}}"
-{{ end }}
-REDIS_PASSWORD="{{- key "redis/password" | trimSpace -}}"
 {{- range service "meilisearch-v1-10" }}
 MEILISEARCH_HOST="http://127.0.0.1:{{- .Port -}}"
 {{ end }}
@@ -36,3 +29,10 @@ HOME="/secrets/"
 RESPONSE_CACHE_HEADER_NAME="x-cache-time"
 RESPONSE_CACHE_AGE_HEADER_NAME="x-cache-age"
 RESPONSE_CACHE_AGE_HEADER=true
+REDIS_CLIENT="phpredis"
+REDIS_SCHEME="null"
+REDIS_PORT="-1"
+REDIS_HOST="/alloc/tmp/redis.sock"
+REDIS_PASSWORD="{{ env "NOMAD_ALLOC_ID" }}"
+REDIS_DB=0
+REDIS_CACHE_DB=1

.nomad/conf/www.conf

@@ -13,9 +13,7 @@ catch_workers_output = yes
 php_admin_value[date.timezone] = America/New_York
 {{ if ne (env "NOMAD_JOB_NAME") "apiary-sandbox" }}
 php_admin_value[session.save_handler] = redis
-{{- range service "redis" }}
-php_admin_value[session.save_path] = "unix://{{- index .ServiceMeta "socket" | trimSpace -}}?persistent=1&database={{- with (key "redis/session_database" | parseJSON) -}}{{- index . (env "NOMAD_JOB_NAME") -}}{{- end -}}&timeout=1&auth={{- key "redis/password" | trimSpace -}}"
-{{ end }}
+php_admin_value[session.save_path] = "unix:///alloc/tmp/redis.sock?persistent=1&database=2&timeout=1&auth={{ env "NOMAD_ALLOC_ID" }}"
 {{ end }}
 access.log = /proc/self/fd/2
 access.format = "%t %m %{REQUEST_URI}e %s %f %{mili}d %{kilo}M %C \"%{HTTP_USER_AGENT}e\"%"