{ config, pkgs, ... }: let container_name = "it-tools"; compose-dir = "docker-compose/it-tools"; in { config = { environment.etc."${compose-dir}/compose.yaml".text = /* yaml */ '' services: it-tools: container_name: it-tools image: corentinth/it-tools networks: it-tools: labels: - traefik.enable=true - traefik.http.services.it-tools.loadbalancer.server.port=80 - traefik.http.services.it-tools.loadbalancer.server.scheme=http - traefik.http.routers.it-tools-https.entrypoints=websecure - traefik.http.routers.it-tools-https.rule=Host(`it-tools.$DOMAIN_NAME`) - traefik.http.routers.it-tools-https.tls=true - traefik.http.routers.it-tools-https.tls.certresolver=cloudflare restart: unless-stopped networks: it-tools: external: true ''; systemd.services.it-tools = { description = "Docker container : ${container_name}"; after = [ "network.target" "docker.service" "docker.socket" "traefik.service" ]; requires = [ "docker.service" ]; wantedBy = ["multi-user.target"]; path = [ pkgs.docker ]; serviceConfig = { Type = "exec"; # Pull the latest image before running ExecStartPre = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml pull"; # Bring the service up ExecStart = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml up --remove-orphans"; # Take it down gracefully ExecStop = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml down"; Restart = "on-failure"; }; }; }; }