nomad/stacks/ai/ai-frontend.nomad

job "ai-frontend" {
  datacenters = ["Homelab-PTECH-DC"]
  region      = "home"
  type        = "service"

  # --- OpenWebUI ---
  group "openwebui" {
    count = 1

    constraint {
      attribute = "${attr.unique.hostname}"
      value     = "hp1-home" 
    }

    network {
      port "http" { 
        static = 8080 
        to     = 8080
      }
    }

    service {
      name = "openwebui"
      port = "http"
      tags = ["traefik.enable=true"]
      check {
        type     = "http"
        path     = "/health"
        interval = "20s"
        timeout  = "2s"
      }
    }

    task "server" {
      driver = "podman"
      
      env {
        # REVERTED: Now using Consul DNS again
        OLLAMA_BASE_URL = "http://ollama.service.consul:11434"
      }

      config {
        image = "ghcr.io/open-webui/open-webui:main"
        ports = ["http"]
        volumes = [
          "/mnt/local-ssd/nomad/stacks/ai/ai-frontend/openwebui:/app/backend/data"
        ]

        # --- THE FIX: Point DNS to Consul Server ---
        dns_servers = ["192.168.1.133"]
        dns_search  = ["service.consul"]
      }
      
      resources { 
        cpu    = 1000
        memory = 1024 
      }
    }
  }

  # --- LobeChat ---
  group "lobechat" {
    count = 1
    
    constraint {
      attribute = "${attr.unique.hostname}"
      value     = "hp1-home"
    }

    network {
      port "http" { 
        static = 3210 
        to     = 3210
      }
    }

    service {
      name = "lobechat"
      port = "http"
      tags = ["traefik.enable=true"]
      check {
        type     = "http"
        path     = "/api/health"
        interval = "20s"
        timeout  = "2s"
      }
    }

    task "server" {
      driver = "podman"
      
      env {
        # REVERTED: Now using Consul DNS again
        OLLAMA_PROXY_URL = "http://ollama.service.consul:11434"
        
        # Kept this in, but Authentik will handle security later as you noted
        ACCESS_CODE      = "securepassword123"
      }

      config {
        # Pinned version for stability
        image = "docker.io/lobehub/lobe-chat:v1.143.0"
        ports = ["http"]
        
        # --- THE FIX: Point DNS to Consul Server ---
        dns_servers = ["192.168.1.133"]
        dns_search  = ["service.consul"]
      }
      
      resources {
        cpu    = 500
        memory = 1024 
      }
    }
  }
}