job "icloud_backup" {
    region      = "global"
    datacenters = ["{{ datacenter_name }}"]
    type        = "service"

    // Need to authenticate within the container by running
    //      icloud --username=<icloud-username> --session-directory=/app/session_data
    // and then entering the 2FA code that is sent to the user associated with the iCloud account.

    // constraint {
    //     attribute = "${node.unique.name}"
    //     operator  = "regexp"
    //     value     = "rpi(1|2|3)"
    // }

    update {
        max_parallel      = 1
        health_check      = "checks"
        min_healthy_time  = "10s"
        healthy_deadline  = "5m"
        progress_deadline = "10m"
        auto_revert       = true
        canary            = 0
        stagger           = "30s"
    }

    group "icloud_backup" {

        count = 1

        restart {
            attempts = 0
            delay    = "30s"
        }

        task "icloud_backup" {

            env {
                ENV_CONFIG_FILE_PATH = "/local/icloud_backup.yaml"
                PGID                 = "${meta.PGID}"
                PUID                 = "${meta.PUID}"
                TZ                   = "America/New_York"
                // ENV_ICLOUD_PASSWORD = "[icloud password]"  # 2FA renders this env var useless at the moment.
            }

            driver = "docker"
            config {
                image    = "mandarons/icloud-drive"
                hostname = "${NOMAD_TASK_NAME}"
                volumes  = [
                    "${meta.nfsStorageRoot}/nate/icloud_backup:/app/icloud",
                    "${meta.nfsStorageRoot}/pi-cluster/icloud_backup/session_data:/app/session_data",
                    "/etc/timezone:/etc/timezone:ro",
                    "/etc/localtime:/etc/localtime:ro"
                ]
            } // docker config

            template {
                destination = "local/icloud_backup.yaml"
                env         = false
                change_mode = "restart"
                perms       = "644"
                data        = <<-EOH
                    ---
                    app:
                        logger:
                            # level - debug, info (default), warning, or error
                            level: "info"
                            # log filename icloud.log (default)
                            filename: "icloud.log"
                        credentials:
                            # iCloud drive username
                            username: "{{ icloud_backup_username }}"
                            # Retry login interval
                            retry_login_interval: 3600  # 1 hour
                        root: "icloud"
                        smtp:
                            # If you want to receive email notifications about expired/missing 2FA credentials then uncomment
                            email: "{{ email_smtp_account }}"
                            # optional, to email address. Default is sender email.
                            #to: "receiver@test.com"
                            password: "{{ icloud_backup_smtp_password }}"
                            host: "{{ email_smtp_host }}"
                            port: {{ email_smtp_port_starttls }}
                            # If your email provider doesn't handle TLS
                            no_tls: false
                        drive:
                            destination: "drive"
                            remove_obsolete: true
                            sync_interval: 172800 # 2 days
                            filters:
                                # File filters to be included in syncing iCloud drive content
                                folders:
                                    - "Scanner By Readdle"
                                    - "Documents by Readdle"
                                    # - "folder3"
                                file_extensions:
                                    # File extensions to be included
                                    - "pdf"
                                    - "png"
                                    - "jpg"
                                    - "jpeg"
                                    - "xls"
                                    - "xlsx"
                                    - "docx"
                                    - "pptx"
                                    - "txt"
                                    - "md"
                                    - "html"
                                    - "htm"
                                    - "css"
                                    - "js"
                                    - "json"
                                    - "xml"
                                    - "yaml"
                                    - "yml"
                                    - "csv"
                                    - "mp3"
                                    - "mp4"
                                    - "mov"
                                    - "wav"
                                    - "mkv"
                                    - "m4a"
                        photos:
                            destination: "photos"
                            remove_obsolete: true
                            sync_interval: 172800 # 2 days
                            all_albums: false # Optional, default false. If true preserve album structure. If same photo is in multiple albums creates duplicates on filesystem
                            folder_format: "%Y-%m" # optional, if set put photos in subfolders according to format. Cheatsheet - https://strftime.org
                            filters:
                                albums:
                                    # - "album1"
                                file_sizes: # valid values are original, medium and/or thumb
                                    - "original"
                                    # - "medium"
                                    # - "thumb"
                    EOH
            } // template data

            resources {
                cpu    = 900 # MHz
                memory = 100 # MB
            } // resources

        } // task


    } // group


} // job