misc

2026-01-22 12:24:11 +01:00
parent 5b59fa1039
commit eb17551aec
40 changed files with 92 additions and 240 deletions
@@ -0,0 +1,81 @@
+{ config, pkgs, ... }:
+
+let
+  container_name = "nextcloud";
+  compose_file = "podman/nextcloud/compose.yaml";
+  data_dir = "/mnt/data/nextcloud";
+in
+
+{
+  config = {
+    environment.etc."${compose_file}".text =
+      /*
+      yaml
+      */
+      ''
+        services:
+          nextcloud-aio-mastercontainer:
+            image: ghcr.io/nextcloud-releases/all-in-one:latest
+            container_name: nextcloud-aio-mastercontainer
+            networks:
+              nextcloud-aio:
+            volumes:
+              - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
+              - /run/user/1000/podman/podman.sock:/var/run/docker.sock:ro
+            environment:
+              APACHE_PORT: 11000
+              NEXTCLOUD_TRUSTED_DOMAINS: nextcloud.$DOMAIN_NAME nextcloud-aio.$DOMAIN_NAME
+              TRUSTED_PROXIES: 172.16.1.253
+              APACHE_IP_BINDING: 127.0.0.1
+              NEXTCLOUD_DATADIR: ${data_dir}
+              NEXTCLOUD_ENABLE_DRI_DEVICE: $NEXTCLOUD_ENABLE_DRI_DEVICE
+              NEXTCLOUD_UPLOAD_LIMIT: 16G
+              NEXTCLOUD_MAX_TIME: 3600
+              NEXTCLOUD_MEMORY_LIMIT: 2048M
+              NEXTCLOUD_ADDITIONAL_APKS: imagemagick
+              NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS: imagick
+              WATCHTOWER_DOCKER_SOCKET_PATH: /run/user/1000/podman/podman.sock
+            labels:
+              - traefik.enable=true
+              - traefik.http.services.nextcloud-aio.loadbalancer.server.port=8080
+              - traefik.http.services.nextcloud-aio.loadbalancer.server.scheme=https
+              - traefik.http.routers.nextcloud-aio-https.entrypoints=websecure
+              - traefik.http.routers.nextcloud-aio-https.rule=Host(`nextcloud-aio.$DOMAIN_NAME`)
+              - traefik.http.routers.nextcloud-aio-https.tls=true
+              - traefik.http.routers.nextcloud-aio-https.tls.certresolver=cloudflare
+            init: true
+            restart: always
+
+        networks:
+          nextcloud-aio:
+            external: true
+
+        volumes:
+          nextcloud_aio_mastercontainer:
+            name: nextcloud_aio_mastercontainer
+      '';
+
+    systemd.services.${container_name} = {
+      description = "Podman container : ${container_name}";
+      after = [ "network.target" ];
+      requires = [ "traefik.service" ];
+      wantedBy = [ "multi-user.target" ];
+      path = [ pkgs.podman ];
+
+      serviceConfig = {
+        User = "numbus-admin";
+        Environment = [ "XDG_RUNTIME_DIR=/run/user/1000" ];
+        Type = "exec";
+        # Pull the latest image before running
+        ExecStartPre = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} pull";
+        # Bring the service up
+        ExecStart = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} up --remove-orphans";
+        # Take it down gracefully
+        ExecStop = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} down";
+        Restart = "on-failure";
+        RestartSec = "5m";
+        StartLimitBurst = "3";
+      };
+    };
+  };
+}