feat(arion): migrate resume builder

devices/cluster/modules/caddy.nix

@@ -53,8 +53,8 @@ in {
           jelly.reverseProxy = "${jellyIP}:80";
 
           # Resume builder
-          resume.reverseProxy = "${dockerIP}:3060";
-          resauth.reverseProxy = "${dockerIP}:3100";
+          resume.reverseProxy = "${servivi}:3060";
+          resauth.reverseProxy = "${servivi}:3100";
 
           # Nextcloud & Co
           office.reverseProxy = "http://${servivi}:8055";

devices/nas/modules/arion/default.nix

@@ -11,6 +11,7 @@ in {
     ./immich/compose.nix
     ./music/jbots/compose.nix
     ./nextcloud/compose.nix
+    ./resume/compose.nix
   ];
 
   arion = {

devices/nas/modules/arion/resume/compose.nix

@@ -0,0 +1,51 @@
+{config, ...}: let
+  inherit (config.sops) secrets;
+  inherit (config.arion) rwDataDir;
+
+  rwPath = rwDataDir + "/resume";
+in {
+  arion.projects."resume" = {
+    "postgres" = {
+      image = ./images/postgres.nix;
+      restart = "always";
+
+      ports = ["5432:5432"];
+
+      volumes = [
+        "${rwPath}/db:/var/lib/postgresql/data"
+      ];
+
+      env_file = [secrets.resume.path];
+    };
+
+    "server" = {
+      image = ./images/resume-server.nix;
+      restart = "always";
+
+      ports = ["3100:3100"];
+
+      depends_on = ["postgres"];
+
+      env_file = [secrets.resume.path];
+
+      environment = {
+        PUBLIC_URL = "https://resume.nelim.org";
+        PUBLIC_SERVER_URL = "https://resauth.nelim.org";
+      };
+    };
+
+    "client" = {
+      image = ./images/resume-client.nix;
+      restart = "always";
+
+      ports = ["3060:3000"];
+
+      depends_on = ["server"];
+
+      environment = {
+        PUBLIC_URL = "https://resume.nelim.org";
+        PUBLIC_SERVER_URL = "https://resauth.nelim.org";
+      };
+    };
+  };
+}

devices/nas/modules/arion/resume/images/postgres.nix

@@ -0,0 +1,8 @@
+pkgs:
+pkgs.dockerTools.pullImage {
+  imageName = "postgres";
+  imageDigest = "sha256:d00564ed4c14d702b7b4465dad4f4621c2eb985a21758b27d20c673b9fc3ebd4";
+  sha256 = "17d2fcmb47ijrc96y55fihjjb2dsj9jjhjn4kyacdi5g4x5aanz7";
+  finalImageName = "postgres";
+  finalImageTag = "15-alpine";
+}

devices/nas/modules/arion/resume/images/resume-client.nix

@@ -0,0 +1,8 @@
+pkgs:
+pkgs.dockerTools.pullImage {
+  imageName = "amruthpillai/reactive-resume";
+  imageDigest = "sha256:9cbe8efde6f489da05367b5b2d0f0097b397f76fa1dcefd0352f174e50221826";
+  sha256 = "1ybsnr91518m7v2g9drp2pdibml4rsfa5mqnrjckwq1ai9mlg1rj";
+  finalImageName = "amruthpillai/reactive-resume";
+  finalImageTag = "client-latest";
+}

devices/nas/modules/arion/resume/images/resume-server.nix

@@ -0,0 +1,8 @@
+pkgs:
+pkgs.dockerTools.pullImage {
+  imageName = "amruthpillai/reactive-resume";
+  imageDigest = "sha256:f14519b5d72fab07a948ce0ac6ac8e09321f1b05865e9d951851467e8be0542f";
+  sha256 = "0znbhnixy22i80h2qjylsf8v0mg07scfirh2q5w8njf7sa52w0d6";
+  finalImageName = "amruthpillai/reactive-resume";
+  finalImageTag = "server-latest";
+}