terraform { required_providers { coder = { source = "coder/coder" } docker = { source = "kreuzwerker/docker" version = "~> 3.0.0" } } } locals { // These are Tailscale IP addresses. Ask Dean or Kyle for help. docker_host = { "" = "tcp://100.94.74.63:2375" "us-pittsburgh" = "tcp://100.94.74.63:2375" "eu-helsinki" = "tcp://100.117.102.81:2375" "ap-sydney" = "tcp://100.87.194.110:2375" "sa-saopaulo" = "tcp://100.99.64.123:2375" "eu-paris" = "tcp://100.74.161.61:2375" } repo_dir = replace(data.coder_parameter.repo_dir.value, "/^~\\//", "/home/coder/") } data "coder_parameter" "repo_dir" { type = "string" name = "Coder Repository Directory" default = "~/coder" description = "The directory specified will be created and [coder/coder](https://github.com/coder/coder) will be automatically cloned into it 🪄." mutable = true } data "coder_parameter" "region" { type = "string" name = "Region" icon = "/emojis/1f30e.png" default = "us-pittsburgh" option { icon = "/emojis/1f1fa-1f1f8.png" name = "Pittsburgh" value = "us-pittsburgh" } option { icon = "/emojis/1f1eb-1f1ee.png" name = "Helsinki" value = "eu-helsinki" } option { icon = "/emojis/1f1e6-1f1fa.png" name = "Sydney" value = "ap-sydney" } option { icon = "/emojis/1f1e7-1f1f7.png" name = "São Paulo" value = "sa-saopaulo" } } provider "docker" { host = lookup(local.docker_host, data.coder_parameter.region.value) } provider "coder" {} data "coder_git_auth" "github" { id = "github" } data "coder_workspace" "me" {} module "slackme" { source = "https://registry.coder.com/modules/slackme" agent_id = coder_agent.dev.id auth_provider_id = "slack" } module "dotfiles" { source = "https://registry.coder.com/modules/dotfiles" agent_id = coder_agent.dev.id } module "git-clone" { source = "https://registry.coder.com/modules/git-clone" agent_id = coder_agent.dev.id url = "https://github.com/coder/coder" path = local.repo_dir } module "personalize" { source = "https://registry.coder.com/modules/personalize" agent_id = coder_agent.dev.id } module "code-server" { source = "https://registry.coder.com/modules/code-server" agent_id = coder_agent.dev.id folder = local.repo_dir } module "jetbrains_gateway" { source = "https://registry.coder.com/modules/jetbrains-gateway" agent_id = coder_agent.dev.id agent_name = "dev" folder = local.repo_dir jetbrains_ides = ["GO", "WS"] default = "GO" } module "vscode-desktop" { source = "https://registry.coder.com/modules/vscode-desktop" agent_id = coder_agent.dev.id folder = local.repo_dir } module "filebrowser" { source = "https://registry.coder.com/modules/filebrowser" agent_id = coder_agent.dev.id } module "coder-login" { source = "https://registry.coder.com/modules/coder-login" agent_id = coder_agent.dev.id } resource "coder_agent" "dev" { arch = "amd64" os = "linux" dir = data.coder_parameter.repo_dir.value env = { GITHUB_TOKEN : data.coder_git_auth.github.access_token, OIDC_TOKEN : data.coder_workspace.me.owner_oidc_access_token, } startup_script_behavior = "blocking" display_apps { vscode = false } # The following metadata blocks are optional. They are used to display # information about your workspace in the dashboard. You can remove them # if you don't want to display any information. metadata { display_name = "CPU Usage" key = "0_cpu_usage" script = "coder stat cpu" interval = 10 timeout = 1 } metadata { display_name = "RAM Usage" key = "1_ram_usage" script = "coder stat mem" interval = 10 timeout = 1 } metadata { display_name = "CPU Usage (Host)" key = "2_cpu_usage_host" script = "coder stat cpu --host" interval = 10 timeout = 1 } metadata { display_name = "RAM Usage (Host)" key = "3_ram_usage_host" script = "coder stat mem --host" interval = 10 timeout = 1 } metadata { display_name = "Swap Usage (Host)" key = "4_swap_usage_host" script = <&1 | awk ' $0 ~ "Word of the Day: [A-z]+" { print $5; exit }' EOT interval = 86400 timeout = 5 } startup_script_timeout = 60 startup_script = <<-EOT set -eux -o pipefail sudo service docker start EOT } resource "docker_volume" "home_volume" { name = "coder-${data.coder_workspace.me.id}-home" # Protect the volume from being deleted due to changes in attributes. lifecycle { ignore_changes = all } # Add labels in Docker to keep track of orphan resources. labels { label = "coder.owner" value = data.coder_workspace.me.owner } labels { label = "coder.owner_id" value = data.coder_workspace.me.owner_id } labels { label = "coder.workspace_id" value = data.coder_workspace.me.id } # This field becomes outdated if the workspace is renamed but can # be useful for debugging or cleaning out dangling volumes. labels { label = "coder.workspace_name_at_creation" value = data.coder_workspace.me.name } } locals { container_name = "coder-${data.coder_workspace.me.owner}-${lower(data.coder_workspace.me.name)}" registry_name = "codercom/oss-dogfood" } data "docker_registry_image" "dogfood" { // This is temporarily pinned to a pre-nix version of the image at commit // 6cdf1c73c until the Nix kinks are worked out. name = "${local.registry_name}:pre-nix" } resource "docker_image" "dogfood" { name = "${local.registry_name}@${data.docker_registry_image.dogfood.sha256_digest}" pull_triggers = [ data.docker_registry_image.dogfood.sha256_digest ] keep_locally = true } resource "docker_container" "workspace" { count = data.coder_workspace.me.start_count image = docker_image.dogfood.name name = local.container_name # Hostname makes the shell more user friendly: coder@my-workspace:~$ hostname = data.coder_workspace.me.name # Use the docker gateway if the access URL is 127.0.0.1 entrypoint = ["sh", "-c", coder_agent.dev.init_script] # CPU limits are unnecessary since Docker will load balance automatically memory = data.coder_workspace.me.owner == "code-asher" ? 65536 : 32768 runtime = "sysbox-runc" env = [ "CODER_AGENT_TOKEN=${coder_agent.dev.token}", "USE_CAP_NET_ADMIN=true", ] host { host = "host.docker.internal" ip = "host-gateway" } volumes { container_path = "/home/coder/" volume_name = docker_volume.home_volume.name read_only = false } capabilities { add = ["CAP_NET_ADMIN", "CAP_SYS_NICE"] } # Add labels in Docker to keep track of orphan resources. labels { label = "coder.owner" value = data.coder_workspace.me.owner } labels { label = "coder.owner_id" value = data.coder_workspace.me.owner_id } labels { label = "coder.workspace_id" value = data.coder_workspace.me.id } labels { label = "coder.workspace_name" value = data.coder_workspace.me.name } } resource "coder_metadata" "container_info" { count = data.coder_workspace.me.start_count resource_id = docker_container.workspace[0].id item { key = "memory" value = docker_container.workspace[0].memory } item { key = "runtime" value = docker_container.workspace[0].runtime } item { key = "region" value = data.coder_parameter.region.option[index(data.coder_parameter.region.option.*.value, data.coder_parameter.region.value)].name } }