{ config, pkgs, ... }: let container_name = "frigate"; compose_file = "podman/frigate/compose.yaml"; config_dir = "/mnt/config/frigate"; data_dir = "/mnt/data/frigate"; in { config = { environment.etc."${compose_file}".text = /* yaml */ '' services: frigate: image: ghcr.io/blakeblackshear/frigate:stable container_name: ${container_name} shm_size: "512MB" networks: hass_frontend: hass_backend: volumes: - ${config_dir}:/config - ${data_dir}/clips:/media/frigate/clips - ${data_dir}/recordings:/media/frigate/recordings - ${data_dir}/exports:/media/frigate/exports - /etc/localtime:/etc/localtime:ro - type: tmpfs target: /tmp/cache tmpfs: size: 2000000000 environment: FRIGATE_MQTT_USER: $FRIGATE_MQTT_USER FRIGATE_MQTT_PASSWORD: $FRIGATE_MQTT_PASSWORD # --- frigate devices --- # labels: - traefik.enable=true - traefik.http.services.frigate.loadbalancer.server.port=8971 - traefik.http.services.frigate.loadbalancer.server.scheme=http - traefik.http.routers.frigate-https.entrypoints=websecure - traefik.http.routers.frigate-https.rule=Host(`${container_name}.$DOMAIN_NAME`) - traefik.http.routers.frigate-https.tls=true - traefik.http.routers.frigate-https.tls.certresolver=cloudflare restart: unless-stopped networks: hass_backend: external: true hass_frontend: external: true ''; systemd.services.frigate = { description = "Podman container : ${container_name}"; after = [ "network.target" "traefik.service" ]; requires = [ "network.target" ]; wantedBy = ["multi-user.target"]; path = [ pkgs.podman-compose ]; serviceConfig = { Type = "exec"; # Pull the latest image before running ExecStartPre = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} pull"; # Bring the service up ExecStart = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} up --remove-orphans"; # Take it down gracefully ExecStop = "${pkgs.podman-compose}/bin/podman-compose -f /etc/${compose_file} down"; Restart = "on-failure"; }; }; }; }