sora/nixconfig
1
0
Fork 1
Code Issues 2 Pull Requests Actions Releases Activity

Wip Migrate podman

Browse Source
This commit is contained in:
soraefir
2026-05-06 01:05:32 +02:00
parent b2d040d414
commit fd7797c6e7
5 changed files with 65 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
modules/server/containers/default.nix
View File

@@ -4,8 +4,7 @@ let
enabledConfigs = lib.filterAttrs (name: c: c.enable) cfg;
containerSetsList = lib.mapAttrsToList (name: containerCfg:
import (./defs + "/${name}.nix") {
inherit config pkgs lib ;
inherit (containerCfg) port special_param;
inherit config pkgs lib containerCfg;
}
) enabledConfigs;
mergedContainers = lib.attrsets.mergeAttrsList (lib.map(e: e.containers) containerSetsList);
@@ -16,5 +15,16 @@ in
backend = "podman";
containers = mergedContainers;
};
systemd.services.init-podman-network = {
description = "Create Podman network with subnet";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "oneshot";
script = ''
${pkgs.podman}/bin/podman network inspect podnet || \
${pkgs.podman}/bin/podman network create --subnet=10.88.0.0/16 podnet
'';
};
};
}

25
modules/server/containers/defs/authentik.nix
View File

@@ -1,4 +1,4 @@
{ config, pkgs, lib, ... }:
{ config, containerCfg, pkgs, lib, ... }:
let serverCfg = config.syscfg.server;
in {
systemd.tmfiles.rules = [
@@ -6,17 +6,6 @@ in {
"d ${serverCfg.dataPath}/authentik/template 0755 root root -"
];
containers = {
auth_postgresql = {
image = "postgres:14-alpine";
hostname = "auth_postgresql";
volumes = [ ];
environment = {
POSTGRES_PASSWORD = "/run/secrets/AUTHENTIK_POSTGRESQL__PASSWORD";
POSTGRES_USER = "authentik";
POSTGRES_DB = "authentik";
};
};
auth_redis = {
image = "redis:alpine";
hostname = "auth_redis";
@@ -52,11 +41,15 @@ in {
"traefik.http.routers.sso.entrypoints" = "web-secure";
"traefik.http.routers.sso.rule" = "Host(`sso.${serverCfg.hostDomain}`)";
"traefik.http.routers.sso.tls" = "true";
"traefik.http.services.sso.loadbalancer.server.port" = "9000";
"traefik.http.services.sso.loadbalancer.server.port" = "${toString containerCfg.port}";
};
cmd = [ "server" ];
extraOptions = [
"--network=portnet"
"--ip=${containerCfg.ip}"
];
ports = [
"9999:9000"
"9999:${toString containerCfg.port}"
];
};
@@ -71,8 +64,8 @@ in {
environment = {
"AUTHENTIK_REDIS__HOST" = "auth_redis";
"AUTHENTIK_POSTGRESQL__HOST" = "auth_postgresql";
"AUTHENTIK_POSTGRESQL__USER" = "authentik";
"AUTHENTIK_POSTGRESQL__NAME" = "authentik";
"AUTHENTIK_POSTGRESQL__USER" = "authentik_user";
"AUTHENTIK_POSTGRESQL__NAME" = "authentik_db";
"AUTHENTIK_POSTGRESQL__PASSWORD" = "AUTHENTIK_DB_PASSWORD";
"AUTHENTIK_SECRET_KEY" = "AUTHENTIK_SECRET_KEY";
};