- Services: Added Part-DB

- Implementation: Added nix-sops based secret version controlling.
This commit is contained in:
Root User 2026-02-07 17:31:23 +01:00
parent 99a0ed1719
commit 5e68e6ee96
Signed by: root
GPG key ID: 087F0A95E5766D72
19 changed files with 258 additions and 86 deletions

View file

@ -25,11 +25,63 @@
virtualisation.oci-containers.backend = "podman";
# Containers
virtualisation.oci-containers.containers."partdb" = {
image = "jbtronics/part-db1:latest";
environment = {
"ALLOW_ATTACHMENT_DOWNLOADS" = "0";
"APP_ENV" = "docker";
"BASE_CURRENCY" = "EUR";
"DATABASE_URL" = "postgresql://:@:/?charset=utf8";
"DEFAULT_LANG" = "en";
"DEFAULT_TIMEZONE" = "Europe/Berlin";
"INSTANCE_NAME" = "Part-DB";
"POSTGRES_DB" = "part_db_database";
"POSTGRES_HOST" = "10.1.1.251";
"POSTGRES_PORT" = "5432";
"USE_GRAVATAR" = "0";
};
environmentFiles = [
config.sops.secrets."songsheet/database".path
];
volumes = [
"nix-system-configs/modules/songsheet/wavelog/db:/var/www/html/var/db:rw"
"nix-system-configs/modules/songsheet/wavelog/public_media:/var/www/html/public/media:rw"
"nix-system-configs/modules/songsheet/wavelog/uploads:/var/www/html/uploads:rw"
];
ports = [
"8087:80/tcp"
];
labels = {
"compose2nix.settings.sops.secrets" = "songsheet/database";
};
log-driver = "journald";
extraOptions = [
"--network-alias=partdb"
"--network=wavelog_default"
];
};
systemd.services."podman-partdb" = {
serviceConfig = {
Restart = lib.mkOverride 90 "always";
};
after = [
"podman-network-wavelog_default.service"
];
requires = [
"podman-network-wavelog_default.service"
];
partOf = [
"podman-compose-wavelog-root.target"
];
wantedBy = [
"podman-compose-wavelog-root.target"
];
};
virtualisation.oci-containers.containers."wavelog-db" = {
image = "mariadb:11.3";
environment = {
"MARIADB_DATABASE" = "wavelog";
"MARIADB_PASSWORD" = "oijawfjiojoijoiawf";
"MARIADB_PASSWORD" = "THIS_IS_NOT_IN_USE_yes";
"MARIADB_RANDOM_ROOT_PASSWORD" = "yes";
"MARIADB_USER" = "wavelog";
};