121 lines
4 KiB
Nix
121 lines
4 KiB
Nix
# Auto-generated using compose2nix v0.1.6.
|
|
{ pkgs, lib, ... }: {
|
|
# Runtime
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
autoPrune.enable = true;
|
|
dockerCompat = true;
|
|
defaultNetwork.settings = {
|
|
# Required for container networking to be able to use names.
|
|
dns_enabled = true;
|
|
};
|
|
};
|
|
virtualisation.oci-containers.backend = "podman";
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."bandwidth" = {
|
|
image = "lscr.io/linuxserver/speedtest-tracker:latest";
|
|
environment = {
|
|
DB_CONNECTION = "mysql";
|
|
DB_DATABASE = "speedtest_tracker";
|
|
DB_HOST = "bandwidth-db";
|
|
DB_PASSWORD = "password";
|
|
DB_PORT = "3306";
|
|
DB_USERNAME = "speedy";
|
|
PGID = "1000";
|
|
PUID = "1000";
|
|
TZ = "America/Chicago";
|
|
};
|
|
volumes = [
|
|
"/etc/localtime:/etc/localtime:ro"
|
|
"/home/don/docker/speedtest/config:/config:rw"
|
|
"/home/don/docker/speedtest/web:/etc/ssl/web:rw"
|
|
];
|
|
dependsOn = [ "bandwidth-db" "bandwidth-ts" ];
|
|
log-driver = "journald";
|
|
extraOptions = [ "--network=container:bandwidth-ts" ];
|
|
};
|
|
systemd.services."podman-bandwidth" = {
|
|
serviceConfig = { Restart = lib.mkOverride 500 "always"; };
|
|
partOf = [ "podman-compose-tstest-root.target" ];
|
|
unitConfig.UpheldBy =
|
|
[ "podman-bandwidth-db.service" "podman-bandwidth-ts.service" ];
|
|
wantedBy = [ "podman-compose-tstest-root.target" ];
|
|
};
|
|
virtualisation.oci-containers.containers."bandwidth-db" = {
|
|
image = "mariadb:10";
|
|
environment = {
|
|
MARIADB_DATABASE = "speedtest_tracker";
|
|
MARIADB_PASSWORD = "password";
|
|
MARIADB_RANDOM_ROOT_PASSWORD = "true";
|
|
MARIADB_USER = "speedy";
|
|
PGID = "1000";
|
|
PUID = "1000";
|
|
};
|
|
volumes = [ "/home/don/docker/speedtest-db:/var/lib/mysql:rw" ];
|
|
dependsOn = [ "bandwidth-ts" ];
|
|
log-driver = "journald";
|
|
extraOptions = [ "--network=container:bandwidth-ts" ];
|
|
};
|
|
systemd.services."podman-bandwidth-db" = {
|
|
serviceConfig = { Restart = lib.mkOverride 500 "always"; };
|
|
partOf = [ "podman-compose-tstest-root.target" ];
|
|
unitConfig.UpheldBy = [ "podman-bandwidth-ts.service" ];
|
|
wantedBy = [ "podman-compose-tstest-root.target" ];
|
|
};
|
|
virtualisation.oci-containers.containers."bandwidth-ts" = {
|
|
image = "tailscale/tailscale";
|
|
environment = {
|
|
PGID = "1000";
|
|
PUID = "1000";
|
|
TS_ACCEPT_DNS = "true";
|
|
TS_AUTHKEY =
|
|
"tskey-auth-k6qutwuAk221CNTRL-9L2MS7sw2SVtH2kYKCcVNVsUHKYSX5UjH";
|
|
TS_HOSTNAME = "fred-bw";
|
|
TS_STATE_DIR = "/var/lib/tailscale";
|
|
};
|
|
volumes = [
|
|
"/dev/net/tun:/dev/net/tun:rw"
|
|
"/home/don/docker/tailscale/var_lib:/var/lib:rw"
|
|
];
|
|
cmd = [ "tailscaled" ];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--cap-add=net_admin"
|
|
"--cap-add=sys_module"
|
|
"--network-alias=bandwidth-ts"
|
|
"--network=tstest-default"
|
|
"--privileged"
|
|
];
|
|
};
|
|
systemd.services."podman-bandwidth-ts" = {
|
|
serviceConfig = { Restart = lib.mkOverride 500 "no"; };
|
|
after = [ "podman-network-tstest-default.service" ];
|
|
requires = [ "podman-network-tstest-default.service" ];
|
|
partOf = [ "podman-compose-tstest-root.target" ];
|
|
wantedBy = [ "podman-compose-tstest-root.target" ];
|
|
};
|
|
|
|
# Networks
|
|
systemd.services."podman-network-tstest-default" = {
|
|
path = [ pkgs.podman ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
ExecStop = "${pkgs.podman}/bin/podman network rm -f tstest-default";
|
|
};
|
|
script = ''
|
|
podman network inspect tstest-default || podman network create tstest-default --opt isolate=true
|
|
'';
|
|
partOf = [ "podman-compose-tstest-root.target" ];
|
|
wantedBy = [ "podman-compose-tstest-root.target" ];
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."podman-compose-tstest-root" = {
|
|
unitConfig = { Description = "Root target generated by compose2nix."; };
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
}
|