cdombroski/nix-configs
1
0
Fork 0
Code Activity Actions

some modules for containers

Browse source
This commit is contained in:
Chris Dombroski 2024-09-30 20:37:45 -04:00
parent c3d304adee
commit 600a3e0eef
3 changed files with 61 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
nixos-configurations/zeus.nix
View file

@ -23,6 +23,7 @@ in
ezModules.networkd-base ezModules.networkd-base
ezModules.smartd ezModules.smartd
ezModules.plymouth ezModules.plymouth
ezModules.docker-proxy
]; ];
boot = { boot = {
@ -176,26 +177,11 @@ in
}; };
virtualisation = { virtualisation = {
containers.enable = true;
podman = { podman = {
enable = true;
dockerCompat = true;
defaultNetwork.settings.dns_enabled = true; defaultNetwork.settings.dns_enabled = true;
autoPrune.enable = true; autoPrune.enable = true;
}; };
oci-containers.containers = { oci-containers.containers = {
dockerproxy = {
image = "ghcr.io/tecnativa/docker-socket-proxy:latest";
volumes = [ "/var/run/podman/podman.sock:/var/run/docker.sock:ro" ];
environment = {
CONTAINERS = "1";
POST = "0";
};
extraOptions = [
"--pull=newer"
"--network=www"
];
};
swag = { swag = {
image = "lscr.io/linuxserver/swag:2.9.0-ls292"; image = "lscr.io/linuxserver/swag:2.9.0-ls292";
volumes = [ "swag-config:/config" ]; volumes = [ "swag-config:/config" ];

23
nixos-modules/docker-proxy.nix Normal file
View file

@ -0,0 +1,23 @@
{
virtualisation = {
containers.enable = true;
podman = {
enable = true;
dockerCompat = true;
};
oci-containers.containers = {
dockerproxy = {
image = "ghcr.io/tecnativa/docker-socket-proxy:latest";
volumes = [ "/var/run/podman/podman.sock:/var/run/docker.sock:ro" ];
environment = {
CONTAINERS = "1";
POST = "0";
};
extraOptions = [
"--pull=newer"
"--network=www"
];
};
};
};
}

37
nixos-modules/docker-swag.nix Normal file
View file

@ -0,0 +1,37 @@
{
virtualisation = {
oci-containers.containers = {
swag = {
image = "lscr.io/linuxserver/swag:latest";
volumes = [ "swag-config:/config" ];
environment = {
TZ = "America/New_York";
URL = "icanttype.org";
VALIDATION = "dns";
SUBDOMAINS = "wildcard";
DNSPLUGIN = "cloudflare";
DOCKER_HOST = "dockerproxy";
DOCKER_MODS = "linuxserver/mods:swag-dashboard|linuxserver/mods:swag-auto-proxy|linuxserver/mods:universal-docker|linuxserver/mods:universal-cloudflared";
CF_ZONE_ID = "4e68852334290a922718696a0986e75a";
CF_ACCOUNT_ID = "5c1c252b9d9a9af6ea3a5de8590f36fa";
CF_API_TOKEN = "mRfY8ubtFUxzVuehI6WFipSQFIcstCNds7RF5FTQ";
CF_TUNNEL_NAME = "icanttype.org";
CF_TUNNEL_PASSWORD = "iZh4UYxVSo3S2H3XwwboM2z@mJEqYJkQ5yMTfd5p";
FILE__CF_TUNNEL_CONFIG = "/config/tunnelconfig.yml";
EMAIL = "cdombroski@gmail.com";
};
ports = [
"80:80"
"443:443"
];
extraOptions = [
"--pull=newer"
"--network=www"
"--cap-add"
"NET_ADMIN"
"--network-alias=icanttype.org"
];
};
};
};
}