75 lines
2.4 KiB
Nix
75 lines
2.4 KiB
Nix
# Auto-generated by compose2nix.
|
|
{ pkgs, lib, config, ... }:
|
|
|
|
{
|
|
# Runtime
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
autoPrune.enable = true;
|
|
dockerCompat = true;
|
|
};
|
|
|
|
# Enable container name DNS for all Podman networks.
|
|
networking.firewall.interfaces =
|
|
let
|
|
matchAll = if !config.networking.nftables.enable then "podman+" else "podman*";
|
|
in
|
|
{
|
|
"${matchAll}".allowedUDPPorts = [ 53 ];
|
|
};
|
|
|
|
virtualisation.oci-containers.backend = "podman";
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."caddy" = {
|
|
image = "docker.io/library/caddy:latest";
|
|
volumes = [
|
|
"/home/don/podman/caddy/Caddyfile:/etc/caddy/Caddyfile:rw"
|
|
"/home/don/podman/caddy/config:/config/caddy:rw"
|
|
"/home/don/podman/caddy/data:/data/caddy:rw"
|
|
"/home/don/www/p365:/srv/p365:rw"
|
|
"/home/don/www/travel.donaldharper.com:/srv/travel:rw"
|
|
"/home/don/www/www.donaldharper.com:/srv/donaldharper:rw"
|
|
"/home/don/www/www.donharper.org:/srv/donharper:rw"
|
|
"/home/don/www/www.duckland.org:/srv/duckland:rw"
|
|
];
|
|
ports = [ "443:443/tcp" "80:80/tcp" "2020:2020/tcp" ];
|
|
user = "1000";
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--hostname=caddy"
|
|
"--network-alias=caddy"
|
|
"--network=websites_default"
|
|
];
|
|
};
|
|
systemd.services."podman-caddy" = {
|
|
serviceConfig = { Restart = lib.mkOverride 90 "no"; };
|
|
after = [ "podman-network-websites_default.service" ];
|
|
requires = [ "podman-network-websites_default.service" ];
|
|
partOf = [ "podman-compose-websites-root.target" ];
|
|
wantedBy = [ "podman-compose-websites-root.target" ];
|
|
};
|
|
|
|
# Networks
|
|
systemd.services."podman-network-websites_default" = {
|
|
path = [ pkgs.podman ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
ExecStop = "podman network rm -f websites_default";
|
|
};
|
|
script = ''
|
|
podman network inspect websites_default || podman network create websites_default
|
|
'';
|
|
partOf = [ "podman-compose-websites-root.target" ];
|
|
wantedBy = [ "podman-compose-websites-root.target" ];
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."podman-compose-websites-root" = {
|
|
unitConfig = { Description = "Root target generated by compose2nix."; };
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
}
|