NixOS-Configs/hosts/fred/podman.nix

# Auto-generated using compose2nix v0.1.6.
{ pkgs, lib, ... }:

{
  # Runtime
  virtualisation.podman = {
    enable = true;
    autoPrune.enable = true;
    dockerCompat = true;
    defaultNetwork.settings = {
      # Required for container networking to be able to use names.
      dns_enabled = true;
    };
  };
  virtualisation.oci-containers.backend = "podman";

  # Containers
  virtualisation.oci-containers.containers."bandwidth" = {
    image = "ghcr.io/alexjustesen/speedtest-tracker:latest";
    environment = {
      DB_CONNECTION = "mysql";
      DB_DATABASE = "speedtest_tracker";
      DB_HOST = "bandwidth-db";
      DB_PASSWORD = "password";
      DB_PORT = "3306";
      DB_USERNAME = "speedy";
      PGID = "1000";
      PUID = "1000";
      TZ = "America/Chicago";
    };
    volumes = [
      "/etc/localtime:/etc/localtime:ro"
      "/home/don/docker/speedtest/config:/config:rw"
      "/home/don/docker/speedtest/web:/etc/ssl/web:rw"
    ];
    dependsOn = [
      "bandwidth-db"
      "bandwidth-ts"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network=container:bandwidth-ts"
    ];
  };
  systemd.services."podman-bandwidth" = {
    serviceConfig = {
      Restart = lib.mkOverride 500 "always";
    };
    partOf = [
      "podman-compose-tstest-root.target"
    ];
    unitConfig.UpheldBy = [
      "podman-bandwidth-db.service"
      "podman-bandwidth-ts.service"
    ];
    wantedBy = [
      "podman-compose-tstest-root.target"
    ];
  };
  virtualisation.oci-containers.containers."bandwidth-db" = {
    image = "mariadb:10";
    environment = {
      MARIADB_DATABASE = "speedtest_tracker";
      MARIADB_PASSWORD = "password";
      MARIADB_RANDOM_ROOT_PASSWORD = "true";
      MARIADB_USER = "speedy";
      PGID = "1000";
      PUID = "1000";
    };
    volumes = [
      "/home/don/docker/speedtest-db:/var/lib/mysql:rw"
    ];
    dependsOn = [
      "bandwidth-ts"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network=container:bandwidth-ts"
    ];
  };
  systemd.services."podman-bandwidth-db" = {
    serviceConfig = {
      Restart = lib.mkOverride 500 "always";
    };
    partOf = [
      "podman-compose-tstest-root.target"
    ];
    unitConfig.UpheldBy = [
      "podman-bandwidth-ts.service"
    ];
    wantedBy = [
      "podman-compose-tstest-root.target"
    ];
  };
  virtualisation.oci-containers.containers."bandwidth-ts" = {
    image = "tailscale/tailscale";
    environment = {
      PGID = "1000";
      PUID = "1000";
      TS_ACCEPT_DNS = "true";
      TS_AUTHKEY = "tskey-auth-kt22J52CNTRL-iT7CCqfci73sWvVy6Dyi83DWzwLnNyknF";
      TS_HOSTNAME = "fred-bw";
      TS_STATE_DIR = "/var/lib/tailscale";
    };
    volumes = [
      "/dev/net/tun:/dev/net/tun:rw"
      "/home/don/docker/tailscale/var_lib:/var/lib:rw"
    ];
    cmd = [ "tailscaled" ];
    log-driver = "journald";
    extraOptions = [
      "--cap-add=net_admin"
      "--cap-add=sys_module"
      "--network-alias=bandwidth-ts"
      "--network=tstest-default"
      "--privileged"
    ];
  };
  systemd.services."podman-bandwidth-ts" = {
    serviceConfig = {
      Restart = lib.mkOverride 500 "no";
    };
    after = [
      "podman-network-tstest-default.service"
    ];
    requires = [
      "podman-network-tstest-default.service"
    ];
    partOf = [
      "podman-compose-tstest-root.target"
    ];
    wantedBy = [
      "podman-compose-tstest-root.target"
    ];
  };

  # Networks
  systemd.services."podman-network-tstest-default" = {
    path = [ pkgs.podman ];
    serviceConfig = {
      Type = "oneshot";
      RemainAfterExit = true;
      ExecStop = "${pkgs.podman}/bin/podman network rm -f tstest-default";
    };
    script = ''
      podman network inspect tstest-default || podman network create tstest-default --opt isolate=true
    '';
    partOf = [ "podman-compose-tstest-root.target" ];
    wantedBy = [ "podman-compose-tstest-root.target" ];
  };

  # Root service
  # When started, this will automatically create all resources and start
  # the containers. When stopped, this will teardown all resources.
  systemd.targets."podman-compose-tstest-root" = {
    unitConfig = {
      Description = "Root target generated by compose2nix.";
    };
    wantedBy = [ "multi-user.target" ];
  };
}