nomad

Best Practices

• Define resource stanzas with explicit CPU (MHz) and memory (MB) limits for every task
• Use service stanzas with health checks (http, tcp, or script) for Consul service discovery
• Configure update stanzas with max_parallel, min_healthy_time, healthy_deadline, and auto_revert
• Use constraint stanzas for datacenter, node, and attribute-based placement targeting
• Define restart policies with attempts, interval, delay, and mode (fail or delay) per group
• Use template stanzas with Consul Template syntax for dynamic config from Consul KV and Vault secrets
• Set kill_timeout appropriately to allow graceful shutdown before SIGKILL
• Use vault stanza to inject secrets as environment variables or rendered template files
• Pin Docker image tags to specific versions (never use :latest in production)
• Use spread stanza to distribute allocations across failure domains (rack, zone, host)
• Define ephemeral_disk with migrate = true for stateful batch jobs that need local storage
• Use lifecycle stanza for init/sidecar tasks (prestart, poststart, poststop hooks)
• Configure network stanza with port mappings and DNS settings at the group level
• Use scaling stanza with external autoscaler policies for dynamic replica management