Raphaël Numbus
96 lines
2.9 KiB
Nix
96 lines
2.9 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
passboltVersion = "5.9.0-1-ce-non-root";
|
|
databaseVersion = "12.2";
|
|
helper = import ./lib.nix { inherit config pkgs lib; };
|
|
cfg = config.numbus.services.passbolt;
|
|
in
|
|
|
|
helper.mkPodmanService {
|
|
description = "Passbolt, your password manager";
|
|
name = "passbolt";
|
|
pod = "passbolt";
|
|
defaultPort = "4433";
|
|
scheme = "https";
|
|
configDir = false;
|
|
dataDir = false;
|
|
|
|
# Compose file good
|
|
composeText = ''
|
|
services:
|
|
passbolt-server:
|
|
image: docker.io/passbolt/passbolt:${passboltVersion}
|
|
container_name: passbolt-server
|
|
hostname: passbolt-server
|
|
networks:
|
|
passbolt:
|
|
ports:
|
|
- "${cfg.port}:4433/tcp"
|
|
volumes:
|
|
- passbolt-gpg:/etc/passbolt/gpg
|
|
- passbolt-jwt:/etc/passbolt/jwt
|
|
environment:
|
|
APP_DEFAULT_TIMEZONE: $TZ
|
|
APP_FULL_BASE_URL: https://${cfg.subdomain}.${config.numbus.services.domain}
|
|
DATASOURCES_DEFAULT_HOST: "passbolt-database"
|
|
DATASOURCES_DEFAULT_USERNAME: $PASSBOLT_MYSQL_USER
|
|
DATASOURCES_DEFAULT_PASSWORD: $PASSBOLT_MYSQL_PASSWORD
|
|
DATASOURCES_DEFAULT_DATABASE: $PASSBOLT_MYSQL_DATABASE
|
|
EMAIL_DEFAULT_FROM_NAME: "Passbolt"
|
|
EMAIL_TRANSPORT_DEFAULT_HOST: $EMAIL_TRANSPORT_DEFAULT_HOST
|
|
EMAIL_TRANSPORT_DEFAULT_PORT: $EMAIL_TRANSPORT_DEFAULT_PORT
|
|
EMAIL_TRANSPORT_DEFAULT_USERNAME: $EMAIL_TRANSPORT_DEFAULT_USERNAME
|
|
EMAIL_TRANSPORT_DEFAULT_PASSWORD: $EMAIL_TRANSPORT_DEFAULT_PASSWORD
|
|
EMAIL_TRANSPORT_DEFAULT_TLS: true
|
|
EMAIL_DEFAULT_FROM: passbolt-noreply@${config.numbus.services.domain}
|
|
PASSBOLT_SSL_FORCE: true
|
|
command:
|
|
[
|
|
"/usr/bin/wait-for.sh",
|
|
"-t",
|
|
"0",
|
|
"passbolt-database:3306",
|
|
"--",
|
|
"/docker-entrypoint.sh",
|
|
]
|
|
depends_on:
|
|
- passbolt-database
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- NET_RAW
|
|
restart: unless-stopped
|
|
passbolt-database:
|
|
image: docker.io/library/mariadb:${databaseVersion}
|
|
container_name: passbolt-database
|
|
hostname: passbolt-database
|
|
networks:
|
|
passbolt:
|
|
volumes:
|
|
- passbolt-database:/var/lib/mysql
|
|
environment:
|
|
MYSQL_RANDOM_ROOT_PASSWORD: "true"
|
|
MYSQL_DATABASE: $PASSBOLT_MYSQL_DATABASE
|
|
MYSQL_USER: $PASSBOLT_MYSQL_USER
|
|
MYSQL_PASSWORD: $PASSBOLT_MYSQL_PASSWORD
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- NET_RAW
|
|
restart: unless-stopped
|
|
volumes:
|
|
passbolt-database:
|
|
name: passbolt-database
|
|
passbolt-gpg:
|
|
name: passbolt-gpg
|
|
passbolt-jwt:
|
|
name: passbolt-jwt
|
|
networks:
|
|
passbolt:
|
|
name: passbolt
|
|
driver: bridge
|
|
'';
|
|
} |