275 lines
7.9 KiB
Nix
275 lines
7.9 KiB
Nix
# Auto-generated by compose2nix.
|
|
{
|
|
pkgs,
|
|
lib,
|
|
config,
|
|
...
|
|
}: {
|
|
# Runtime
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
autoPrune.enable = true;
|
|
dockerCompat = true;
|
|
};
|
|
|
|
# Enable container name DNS for all Podman networks.
|
|
networking.firewall.interfaces = let
|
|
matchAll =
|
|
if !config.networking.nftables.enable
|
|
then "podman+"
|
|
else "podman*";
|
|
in {
|
|
"${matchAll}".allowedUDPPorts = [53];
|
|
};
|
|
|
|
virtualisation.oci-containers.backend = "podman";
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."partdb" = {
|
|
image = "jbtronics/part-db1:latest";
|
|
environment = {
|
|
"ALLOW_ATTACHMENT_DOWNLOADS" = "0";
|
|
"APP_ENV" = "docker";
|
|
"BASE_CURRENCY" = "DKK";
|
|
"DEFAULT_LANG" = "en";
|
|
"DEFAULT_TIMEZONE" = "Europe/Copenhagen";
|
|
"INSTANCE_NAME" = "Part-DB";
|
|
"TRUSTED_PROXIES" = "10.1.1.250";
|
|
"USE_GRAVATAR" = "1";
|
|
};
|
|
environmentFiles = [
|
|
config.sops.secrets."songsheet/database/DATABASE_URL".path
|
|
];
|
|
volumes = [
|
|
"wavelog_partdb_db_f:/var/www/html/var/db:rw"
|
|
"wavelog_partdb_media_f:/var/www/html/public/media:rw"
|
|
"wavelog_partdb_uploads_f:/var/www/html/uploads:rw"
|
|
];
|
|
ports = [
|
|
"8087:80/tcp"
|
|
];
|
|
labels = {
|
|
"compose2nix.settings.sops.secrets" = "songsheet/database/DATABASE_URL";
|
|
};
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--network-alias=partdb"
|
|
"--network=wavelog_default"
|
|
];
|
|
};
|
|
systemd.services."podman-partdb" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "always";
|
|
};
|
|
after = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_partdb_db_f.service"
|
|
"podman-volume-wavelog_partdb_media_f.service"
|
|
"podman-volume-wavelog_partdb_uploads_f.service"
|
|
];
|
|
requires = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_partdb_db_f.service"
|
|
"podman-volume-wavelog_partdb_media_f.service"
|
|
"podman-volume-wavelog_partdb_uploads_f.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
};
|
|
virtualisation.oci-containers.containers."wavelog-db" = {
|
|
image = "mariadb:11.3";
|
|
environment = {
|
|
"MARIADB_DATABASE" = "wavelog";
|
|
"MARIADB_PASSWORD" = "THIS_IS_NOT_IN_USE_yes";
|
|
"MARIADB_RANDOM_ROOT_PASSWORD" = "yes";
|
|
"MARIADB_USER" = "wavelog";
|
|
};
|
|
volumes = [
|
|
"wavelog_wavelog-dbdata:/var/lib/mysql:rw"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--network-alias=wavelog-db"
|
|
"--network=wavelog_default"
|
|
];
|
|
};
|
|
systemd.services."podman-wavelog-db" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "always";
|
|
};
|
|
after = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_wavelog-dbdata.service"
|
|
];
|
|
requires = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_wavelog-dbdata.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
};
|
|
virtualisation.oci-containers.containers."wavelog-main" = {
|
|
image = "ghcr.io/wavelog/wavelog:latest";
|
|
environment = {
|
|
"CI_ENV" = "docker";
|
|
};
|
|
volumes = [
|
|
"wavelog_wavelog-config:/var/www/html/application/config/docker:rw"
|
|
"wavelog_wavelog-uploads:/var/www/html/uploads:rw"
|
|
"wavelog_wavelog-userdata:/var/www/html/userdata:rw"
|
|
];
|
|
ports = [
|
|
"8086:80/tcp"
|
|
];
|
|
dependsOn = [
|
|
"wavelog-db"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--network-alias=wavelog-main"
|
|
"--network=wavelog_default"
|
|
];
|
|
};
|
|
systemd.services."podman-wavelog-main" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "always";
|
|
};
|
|
after = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_wavelog-config.service"
|
|
"podman-volume-wavelog_wavelog-uploads.service"
|
|
"podman-volume-wavelog_wavelog-userdata.service"
|
|
];
|
|
requires = [
|
|
"podman-network-wavelog_default.service"
|
|
"podman-volume-wavelog_wavelog-config.service"
|
|
"podman-volume-wavelog_wavelog-uploads.service"
|
|
"podman-volume-wavelog_wavelog-userdata.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-wavelog-root.target"
|
|
];
|
|
};
|
|
|
|
# Networks
|
|
systemd.services."podman-network-wavelog_default" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
ExecStop = "podman network rm -f wavelog_default";
|
|
};
|
|
script = ''
|
|
podman network inspect wavelog_default || podman network create wavelog_default
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
|
|
# Volumes
|
|
systemd.services."podman-volume-wavelog_partdb_db_f" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_partdb_db_f || podman volume create wavelog_partdb_db_f
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_partdb_media_f" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_partdb_media_f || podman volume create wavelog_partdb_media_f
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_partdb_uploads_f" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_partdb_uploads_f || podman volume create wavelog_partdb_uploads_f
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_wavelog-config" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_wavelog-config || podman volume create wavelog_wavelog-config
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_wavelog-dbdata" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_wavelog-dbdata || podman volume create wavelog_wavelog-dbdata
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_wavelog-uploads" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_wavelog-uploads || podman volume create wavelog_wavelog-uploads
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
systemd.services."podman-volume-wavelog_wavelog-userdata" = {
|
|
path = [pkgs.podman];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
podman volume inspect wavelog_wavelog-userdata || podman volume create wavelog_wavelog-userdata
|
|
'';
|
|
partOf = ["podman-compose-wavelog-root.target"];
|
|
wantedBy = ["podman-compose-wavelog-root.target"];
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."podman-compose-wavelog-root" = {
|
|
unitConfig = {
|
|
Description = "Root target generated by compose2nix.";
|
|
};
|
|
wantedBy = ["multi-user.target"];
|
|
};
|
|
}
|