#cloud-config
ssh_authorized_keys:
  - ssh-rsa YOUR_KEY

package_update: true
package_upgrade: true

packages:
  - docker.io

write_files:
  - path: /opt/docker-compose.yml
    content: |
        version: '2'
        services:
          nginx-proxy:
            image: jwilder/nginx-proxy:latest
            restart: always
            ports:
              - "80:80"
              - "443:443"
            volumes:
              - '/home/docker/nginx-proxy/ssl:/etc/nginx/certs:ro'
              - '/etc/nginx/vhost.d'
              - '/usr/share/nginx/html'
              - '/var/run/docker.sock:/tmp/docker.sock:ro'
          letsencrypt-nginx-proxy-companion:
            image: jrcs/letsencrypt-nginx-proxy-companion:latest
            volumes_from:
              - nginx-proxy
            volumes:
              - '/home/docker/nginx-proxy/ssl:/etc/nginx/certs:rw'
              - '/var/run/docker.sock:/var/run/docker.sock:ro'
          rancher-server:
            image: rancher/server:stable
            restart: always
            environment:
              - VIRTUAL_PORT=8080
              - VIRTUAL_HOST=YOUR.HOST.COM
              - LETSENCRYPT_TEST=false
              - LETSENCRYPT_HOST=YOUR.HOST.COM
              - LETSENCRYPT_EMAIL=YOUR@EMAIL.COM
              - CATTLE_DB_CATTLE_MYSQL_HOST=MYSQL_HOST
              - CATTLE_DB_CATTLE_MYSQL_PORT=3306
              - CATTLE_DB_CATTLE_MYSQL_NAME=rancher_server
              - CATTLE_DB_CATTLE_USERNAME=rancher_server
              - CATTLE_DB_CATTLE_PASSWORD=MYSQL_PASSWORD

  - path: /etc/systemd/system/rancher_server.service
    permissions: 0644
    owner: root
    content: |
      [Unit]
      Description=Rancher Server
      After=network.target

      [Service]
      Restart=always
      ExecStartPre=/usr/bin/docker-compose down -v
      ExecStartPre=/usr/bin/docker-compose rm -fv
      ExecStart=/usr/bin/docker-compose --file '/opt/docker-compose.yml' -p rancher_server up -d
      ExecStop=/usr/bin/docker-compose stop

      [Install]
      WantedBy=multi-user.target

runcmd:
  - [ sh, -c, "sudo apt install -y docker" ]
  - [ sh, -c, "sudo apt install -y docker-compose"]
  - [ sh, -c, "sudo service docker start" ]
  - systemctl daemon-reload
  - systemctl enable rancher_server.service
  - systemctl start rancher_server.service