don/NixOS-Configs
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Activity

task | config w1 to run caddy

Browse source
This commit is contained in:
Don Harper 2024-12-26 08:52:43 -06:00
parent ced514f3b5
commit ec04e078e6
34 changed files with 525 additions and 83 deletions
Download patch file Download diff file Expand all files Collapse all files

129
hosts/w1/podman.nix
View file

@ -1,5 +1,7 @@
# Auto-generated using compose2nix v0.1.6.
{ pkgs, lib, ... }: {
# Auto-generated using compose2nix v0.3.1.
{ pkgs, lib, ... }:
{
# Runtime
virtualisation.podman = {
enable = true;
@ -10,111 +12,72 @@
dns_enabled = true;
};
};
# Enable container name DNS for non-default Podman networks.
# https://github.com/NixOS/nixpkgs/issues/226365
networking.firewall.interfaces."podman+".allowedUDPPorts = [ 53 ];
virtualisation.oci-containers.backend = "podman";
# Containers
virtualisation.oci-containers.containers."bandwidth" = {
image = "lscr.io/linuxserver/speedtest-tracker:latest";
environment = {
DB_CONNECTION = "mysql";
DB_DATABASE = "speedtest_tracker";
DB_HOST = "bandwidth-db";
DB_PASSWORD = "password";
DB_PORT = "3306";
DB_USERNAME = "speedy";
PGID = "1000";
PUID = "1000";
TZ = "America/Chicago";
};
virtualisation.oci-containers.containers."caddy" = {
image = "docker.io/library/caddy:latest";
volumes = [
"/etc/localtime:/etc/localtime:ro"
"/home/don/docker/speedtest/config:/config:rw"
"/home/don/docker/speedtest/web:/etc/ssl/web:rw"
"/home/don/podman/caddy/Caddyfile:/etc/caddy/Caddyfile:rw"
"/home/don/podman/caddy/config:/config/caddy:rw"
"/home/don/podman/caddy/data:/data/caddy:rw"
"/home/don/www/p365:/srv/p365:rw"
"/home/don/www/travel.donaldharper.com:/srv/travel:rw"
"/home/don/www/www.donaldharper.com:/srv/donaldharper:rw"
"/home/don/www/www.donharper.org:/srv/donharper:rw"
"/home/don/www/www.duckland.org:/srv/duckland:rw"
];
dependsOn = [ "bandwidth-db" "bandwidth-ts" ];
log-driver = "journald";
extraOptions = [ "--network=container:bandwidth-ts" ];
};
systemd.services."podman-bandwidth" = {
serviceConfig = { Restart = lib.mkOverride 500 "always"; };
partOf = [ "podman-compose-tstest-root.target" ];
unitConfig.UpheldBy =
[ "podman-bandwidth-db.service" "podman-bandwidth-ts.service" ];
wantedBy = [ "podman-compose-tstest-root.target" ];
};
virtualisation.oci-containers.containers."bandwidth-db" = {
image = "mariadb:10";
environment = {
MARIADB_DATABASE = "speedtest_tracker";
MARIADB_PASSWORD = "password";
MARIADB_RANDOM_ROOT_PASSWORD = "true";
MARIADB_USER = "speedy";
PGID = "1000";
PUID = "1000";
};
volumes = [ "/home/don/docker/speedtest-db:/var/lib/mysql:rw" ];
dependsOn = [ "bandwidth-ts" ];
log-driver = "journald";
extraOptions = [ "--network=container:bandwidth-ts" ];
};
systemd.services."podman-bandwidth-db" = {
serviceConfig = { Restart = lib.mkOverride 500 "always"; };
partOf = [ "podman-compose-tstest-root.target" ];
unitConfig.UpheldBy = [ "podman-bandwidth-ts.service" ];
wantedBy = [ "podman-compose-tstest-root.target" ];
};
virtualisation.oci-containers.containers."bandwidth-ts" = {
image = "tailscale/tailscale";
environment = {
PGID = "1000";
PUID = "1000";
TS_ACCEPT_DNS = "true";
TS_AUTHKEY =
"tskey-auth-k6qutwuAk221CNTRL-9L2MS7sw2SVtH2kYKCcVNVsUHKYSX5UjH";
TS_HOSTNAME = "fred-bw";
TS_STATE_DIR = "/var/lib/tailscale";
};
volumes = [
"/dev/net/tun:/dev/net/tun:rw"
"/home/don/docker/tailscale/var_lib:/var/lib:rw"
];
cmd = [ "tailscaled" ];
ports = [ "443:443/tcp" "80:80/tcp" "2020:2020/tcp" ];
user = "1000";
log-driver = "journald";
extraOptions = [
"--cap-add=net_admin"
"--cap-add=sys_module"
"--network-alias=bandwidth-ts"
"--network=tstest-default"
"--privileged"
"--hostname=caddy"
"--network-alias=caddy"
"--network=websites_default"
];
};
systemd.services."podman-bandwidth-ts" = {
serviceConfig = { Restart = lib.mkOverride 500 "no"; };
after = [ "podman-network-tstest-default.service" ];
requires = [ "podman-network-tstest-default.service" ];
partOf = [ "podman-compose-tstest-root.target" ];
wantedBy = [ "podman-compose-tstest-root.target" ];
systemd.services."podman-caddy" = {
serviceConfig = { Restart = lib.mkOverride 90 "no"; };
after = [ "podman-network-websites_default.service" ];
requires = [ "podman-network-websites_default.service" ];
partOf = [ "podman-compose-websites-root.target" ];
wantedBy = [ "podman-compose-websites-root.target" ];
unitConfig.RequiresMountsFor = [
"/home/don/podman/caddy/Caddyfile"
"/home/don/podman/caddy/config"
"/home/don/podman/caddy/data"
"/home/don/www/p365"
"/home/don/www/travel.donaldharper.com"
"/home/don/www/www.donaldharper.com"
"/home/don/www/www.donharper.org"
"/home/don/www/www.duckland.org"
];
};
# Networks
systemd.services."podman-network-tstest-default" = {
systemd.services."podman-network-websites_default" = {
path = [ pkgs.podman ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
ExecStop = "${pkgs.podman}/bin/podman network rm -f tstest-default";
ExecStop = "podman network rm -f websites_default";
};
script = ''
podman network inspect tstest-default || podman network create tstest-default --opt isolate=true
podman network inspect websites_default || podman network create websites_default
'';
partOf = [ "podman-compose-tstest-root.target" ];
wantedBy = [ "podman-compose-tstest-root.target" ];
partOf = [ "podman-compose-websites-root.target" ];
wantedBy = [ "podman-compose-websites-root.target" ];
};
# Root service
# When started, this will automatically create all resources and start
# the containers. When stopped, this will teardown all resources.
systemd.targets."podman-compose-tstest-root" = {
systemd.targets."podman-compose-websites-root" = {
unitConfig = { Description = "Root target generated by compose2nix."; };
wantedBy = [ "multi-user.target" ];
};