Raphaël Billet
81 lines
2.9 KiB
Nix
81 lines
2.9 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
let
|
|
container_name = "nextcloud";
|
|
compose_file = "podman/nextcloud/compose.yaml";
|
|
data_dir = "/mnt/data/nextcloud";
|
|
in
|
|
|
|
{
|
|
config = {
|
|
environment.etc."${compose_file}".text =
|
|
/*
|
|
yaml
|
|
*/
|
|
''
|
|
services:
|
|
nextcloud-aio-mastercontainer:
|
|
image: ghcr.io/nextcloud-releases/all-in-one:latest
|
|
container_name: nextcloud-aio-mastercontainer
|
|
networks:
|
|
nextcloud-aio:
|
|
volumes:
|
|
- nextcloud_aio_mastercontainer:/mnt/docker-aio-config
|
|
- /run/user/1000/podman/podman.sock:/var/run/docker.sock:ro
|
|
environment:
|
|
APACHE_PORT: 11000
|
|
NEXTCLOUD_TRUSTED_DOMAINS: nextcloud.$DOMAIN_NAME nextcloud-aio.$DOMAIN_NAME
|
|
TRUSTED_PROXIES: 172.16.1.253
|
|
APACHE_IP_BINDING: 127.0.0.1
|
|
NEXTCLOUD_DATADIR: ${data_dir}
|
|
NEXTCLOUD_ENABLE_DRI_DEVICE: $NEXTCLOUD_ENABLE_DRI_DEVICE
|
|
NEXTCLOUD_UPLOAD_LIMIT: 16G
|
|
NEXTCLOUD_MAX_TIME: 3600
|
|
NEXTCLOUD_MEMORY_LIMIT: 2048M
|
|
NEXTCLOUD_ADDITIONAL_APKS: imagemagick
|
|
NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick
|
|
WATCHTOWER_DOCKER_SOCKET_PATH: /run/user/1000/podman/podman.sock
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.services.nextcloud-aio.loadbalancer.server.port=8080
|
|
- traefik.http.services.nextcloud-aio.loadbalancer.server.scheme=https
|
|
- traefik.http.routers.nextcloud-aio-https.entrypoints=websecure
|
|
- traefik.http.routers.nextcloud-aio-https.rule=Host(`nextcloud-aio.$DOMAIN_NAME`)
|
|
- traefik.http.routers.nextcloud-aio-https.tls=true
|
|
- traefik.http.routers.nextcloud-aio-https.tls.certresolver=cloudflare
|
|
init: true
|
|
restart: always
|
|
|
|
networks:
|
|
nextcloud-aio:
|
|
external: true
|
|
|
|
volumes:
|
|
nextcloud_aio_mastercontainer:
|
|
name: nextcloud_aio_mastercontainer
|
|
'';
|
|
|
|
systemd.services.${container_name} = {
|
|
description = "Podman container : ${container_name}";
|
|
after = [ "network.target" ];
|
|
requires = [ "traefik.service" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
path = [ pkgs.podman ];
|
|
|
|
serviceConfig = {
|
|
User = "numbus-admin";
|
|
Environment = [ "XDG_RUNTIME_DIR=/run/user/1000" ];
|
|
Type = "exec";
|
|
# Pull the latest image before running
|
|
ExecStartPre = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} pull";
|
|
# Bring the service up
|
|
ExecStart = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} up --remove-orphans";
|
|
# Take it down gracefully
|
|
ExecStop = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} down";
|
|
Restart = "on-failure";
|
|
RestartSec = "5m";
|
|
StartLimitBurst = "3";
|
|
};
|
|
};
|
|
};
|
|
} |