Update systemd services.

templates/nix-config/podman/pi-hole.nix

@@ -26,10 +26,6 @@ in
             environment:
               TZ: $TZ
               FTLCONF_webserver_api_password: $FTLCONF_webserver_api_password
-              FTLCONF_dns_listeningMode: "all"
-              FTLCONF_dns_revServers: true,$HOME_ROUTER_SUBNET,$HOME_ROUTER_IP,home
-              FTLCONF_dns_domain_name: "home"
-              FTLCONF_dns_domain_local: "true"
               FTLCONF_dns_hosts: |
                 $HOME_SERVER_IP frigate.$DOMAIN_NAME
                 $HOME_SERVER_IP gitea.$DOMAIN_NAME
@@ -52,6 +48,7 @@ in
               - SYS_NICE
             labels:
               - traefik.enable=true
+              - traefik.docker.network=pi-hole_frontend
               - traefik.http.services.pihole.loadbalancer.server.port=80
               - traefik.http.services.pihole.loadbalancer.server.scheme=http
               - traefik.http.routers.pihole-https.entrypoints=websecure
@@ -64,29 +61,46 @@ in
           pi-hole_frontend:
             external: true
       '';
-    systemd.services.${container_name} = {
+
+    systemd.services."${container_name}" = {
       description = "Podman container : ${container_name}";
       after = [ "network.target" ];
       requires = [ "traefik.service" ];
       wantedBy = [ "multi-user.target" ];
-      path = [ pkgs.podman ];
+      path = [ pkgs.podman pkgs.coreutils ];
 
       serviceConfig = {
         User = "numbus-admin";
         Environment = [ "XDG_RUNTIME_DIR=/run/user/1000" ];
-        AmbientCapabilities = "CAP_SYS_NICE";
-        LimitNICE = -20;
         Type = "exec";
-        # Pull the latest image before running
-        ExecStartPre = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} pull";
-        # Bring the service up
+        TimeoutStartSec = "600";
+        ExecStartPre = [
+          "${pkgs.bash}/bin/bash -c 'sleep 20'"
+          "-${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} pull"
+        ];
         ExecStart = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} up --remove-orphans";
-        # Take it down gracefully
         ExecStop = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} down";
         Restart = "on-failure";
         RestartSec = "5m";
         StartLimitBurst = "3";
       };
     };
+
+    systemd.services."update-${container_name}" = {
+      description = "Update ${container_name} container";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.systemd}/bin/systemctl restart ${container_name}.service";
+      };
+    };
+
+    systemd.timers."update-${container_name}" = {
+      timerConfig = {
+        OnCalendar = "02:00";
+        RandomizedDelaySec = "60m";
+        Unit = "update-${container_name}.service";
+      };
+      wantedBy = [ "timers.target" ];
+    };
   };
 }