services/nomad/apps/popcorn.nomad: add nomad definitions

this runs the main service components of popcorn:
- statrepo: collects usage reports from users
- pqueryd: reads daily aggregate usage reports and can compile
  statistics about them
- nginx: serves the raw aggregate usage reports

services/nomad/apps/popcorn.nomad

@@ -0,0 +1,124 @@
+job "popcorn" {
+  datacenters = ["VOID-MIRROR"]
+  namespace = "apps"
+  type = "service"
+
+  group "popcorn" {
+    count = 1
+
+    network {
+      mode = "bridge"
+      port "statrepo" { static = 8001 }
+      port "pqueryd" { static = 8003 }
+      port "http" { to = 80 }
+    }
+
+    volume "popcorn_data" {
+      type = "host"
+      source = "popcorn_data"
+      read_only = false
+    }
+
+    service {
+      name = "popcorn-statrepo"
+      port = "statrepo"
+    }
+
+    task "statrepo" {
+      driver = "docker"
+
+      config {
+        image = "ghcr.io/void-linux/infra-popcorn:20240704R1"
+        command = "statrepo"
+        args = [
+          "--port", "${NOMAD_PORT_statrepo}",
+          "--reset_key", "${POPCORN_KEY}",
+        ]
+        ports = ["statrepo"]
+      }
+
+      template {
+                data = <<EOF
+{{- with nomadVar "nomad/jobs/popcorn" -}}
+POPCORN_KEY={{.reset_key}}
+{{- end -}}
+EOF
+        destination = "secrets/env"
+        env = true
+      }
+
+      volume_mount {
+        volume = "popcorn_data"
+        destination = "/var/lib/popcorn"
+      }
+    }
+
+    service {
+      name = "popcorn-pqueryd"
+      port = "pqueryd"
+    }
+
+    task "pqueryd" {
+      driver = "docker"
+
+      config {
+        image = "ghcr.io/void-linux/infra-popcorn:20240704R1"
+        command = "pqueryd"
+        args = [
+          "--checkpoint_enabled=false",
+          "--port", "${NOMAD_PORT_pqueryd}",
+          "--data_dir", "/data",
+        ]
+      }
+
+      resources {
+        memory = 8000
+      }
+
+      volume_mount {
+        volume = "popcorn_data"
+        destination = "/data"
+        read_only = true
+      }
+    }
+
+    service {
+      name = "popcorn"
+      port = "http"
+      meta {
+        nginx_enable = "true"
+        nginx_names = "popcorn.voidlinux.org"
+      }
+    }
+
+    task "nginx" {
+      driver = "docker"
+
+      config {
+        image = "ghcr.io/void-linux/infra-nginx:20230812"
+      }
+
+      template {
+        data = <<EOF
+server {
+    server_name popcorn;
+    listen 0.0.0.0:80 default_server;
+
+    root /srv/www;
+
+    location / {
+        autoindex on;
+    }
+}
+EOF
+        destination = "local/nginx/popcorn.conf"
+      }
+
+      volume_mount {
+        volume = "popcorn_data"
+        destination = "/srv/www"
+        read_only = true
+      }
+    }
+  }
+}