mirror of
https://codeberg.org/muon/home.git
synced 2026-03-08 03:25:16 +00:00
Merge branch 'main' of codeberg.org:muon/home
This commit is contained in:
commit
ce74d1b0eb
3 changed files with 237 additions and 171 deletions
|
|
@ -6,8 +6,8 @@
|
|||
...
|
||||
}: let
|
||||
cfg = config.mods.server.seedbox;
|
||||
port = config.mods.server.nginx.ports.stream;
|
||||
backend-port = config.mods.server.local.ports.seedbox;
|
||||
port = 3013;
|
||||
bport = 3014;
|
||||
in
|
||||
with lib; {
|
||||
options.mods.server.seedbox = {
|
||||
|
|
@ -17,172 +17,181 @@ in
|
|||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
# Runtime
|
||||
virtualisation.podman = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
dockerCompat = true;
|
||||
};
|
||||
config =
|
||||
mkIf config.mods.server.nginx.enable {
|
||||
}
|
||||
// mkIf cfg.enable {
|
||||
networking.firewall = {
|
||||
allowedTCPPorts = [port bport];
|
||||
allowedUDPPorts = [port bport];
|
||||
};
|
||||
|
||||
# Enable container name DNS for all Podman networks.
|
||||
networking.firewall.interfaces = let
|
||||
matchAll =
|
||||
if !config.networking.nftables.enable
|
||||
then "podman+"
|
||||
else "podman*";
|
||||
in {
|
||||
"${matchAll}".allowedUDPPorts = [53];
|
||||
};
|
||||
# Runtime
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
};
|
||||
virtualisation.oci-containers.backend = "docker";
|
||||
|
||||
virtualisation.oci-containers.backend = "podman";
|
||||
# Containers
|
||||
virtualisation.oci-containers.containers."seedbox-backend" = {
|
||||
image = "compose2nix/seedbox-backend";
|
||||
volumes = [
|
||||
"seedbox-lite_seedbox_cache:/app/cache:rw"
|
||||
"seedbox-lite_seedbox_data:/app/data:rw"
|
||||
];
|
||||
ports = [
|
||||
"${toString bport}:3001/tcp"
|
||||
];
|
||||
log-driver = "journald";
|
||||
extraOptions = [
|
||||
"--network-alias=seedbox-backend"
|
||||
"--network=seedbox-lite_seedbox-network"
|
||||
];
|
||||
environment = {
|
||||
NODE_ENV = "production";
|
||||
ACCESS_PASSWORD = "temp_pass";
|
||||
FRONTEND_URL = "http://localhost:${toString port}";
|
||||
};
|
||||
};
|
||||
systemd.services."docker-seedbox-backend" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
||||
RestartSec = lib.mkOverride 90 "100ms";
|
||||
RestartSteps = lib.mkOverride 90 9;
|
||||
};
|
||||
after = [
|
||||
"docker-network-seedbox-lite_seedbox-network.service"
|
||||
"docker-volume-seedbox-lite_seedbox_cache.service"
|
||||
"docker-volume-seedbox-lite_seedbox_data.service"
|
||||
];
|
||||
requires = [
|
||||
"docker-network-seedbox-lite_seedbox-network.service"
|
||||
"docker-volume-seedbox-lite_seedbox_cache.service"
|
||||
"docker-volume-seedbox-lite_seedbox_data.service"
|
||||
];
|
||||
partOf = [
|
||||
"docker-compose-seedbox-lite-root.target"
|
||||
];
|
||||
wantedBy = [
|
||||
"docker-compose-seedbox-lite-root.target"
|
||||
];
|
||||
};
|
||||
virtualisation.oci-containers.containers."seedbox-frontend" = {
|
||||
image = "compose2nix/seedbox-frontend";
|
||||
ports = [
|
||||
"${toString port}:8080/tcp"
|
||||
];
|
||||
dependsOn = [
|
||||
"seedbox-backend"
|
||||
];
|
||||
log-driver = "journald";
|
||||
extraOptions = [
|
||||
"--network-alias=seedbox-frontend"
|
||||
"--network=seedbox-lite_seedbox-network"
|
||||
];
|
||||
environment = {
|
||||
NODE_ENV = "production";
|
||||
ACCESS_PASSWORD = "temp_pass";
|
||||
};
|
||||
};
|
||||
systemd.services."docker-seedbox-frontend" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
||||
RestartSec = lib.mkOverride 90 "100ms";
|
||||
RestartSteps = lib.mkOverride 90 9;
|
||||
};
|
||||
after = [
|
||||
"docker-network-seedbox-lite_seedbox-network.service"
|
||||
];
|
||||
requires = [
|
||||
"docker-network-seedbox-lite_seedbox-network.service"
|
||||
];
|
||||
partOf = [
|
||||
"docker-compose-seedbox-lite-root.target"
|
||||
];
|
||||
wantedBy = [
|
||||
"docker-compose-seedbox-lite-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
# Containers
|
||||
virtualisation.oci-containers.containers."seedbox-backend" = {
|
||||
image = "localhost/compose2nix/seedbox-backend";
|
||||
volumes = [
|
||||
"seedbox-lite_seedbox_cache:/app/cache:rw"
|
||||
"seedbox-lite_seedbox_data:/app/data:rw"
|
||||
];
|
||||
ports = [
|
||||
"${backend-port}:3001/tcp"
|
||||
];
|
||||
log-driver = "journald";
|
||||
extraOptions = [
|
||||
"--network-alias=seedbox-backend"
|
||||
"--network=seedbox-lite_seedbox-network"
|
||||
];
|
||||
};
|
||||
systemd.services."podman-seedbox-backend" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
# Networks
|
||||
systemd.services."docker-network-seedbox-lite_seedbox-network" = {
|
||||
path = [pkgs.docker];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "docker network rm -f seedbox-lite_seedbox-network";
|
||||
};
|
||||
script = ''
|
||||
docker network inspect seedbox-lite_seedbox-network || docker network create seedbox-lite_seedbox-network --driver=bridge
|
||||
'';
|
||||
partOf = ["docker-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["docker-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
after = [
|
||||
"podman-network-seedbox-lite_seedbox-network.service"
|
||||
"podman-volume-seedbox-lite_seedbox_cache.service"
|
||||
"podman-volume-seedbox-lite_seedbox_data.service"
|
||||
];
|
||||
requires = [
|
||||
"podman-network-seedbox-lite_seedbox-network.service"
|
||||
"podman-volume-seedbox-lite_seedbox_cache.service"
|
||||
"podman-volume-seedbox-lite_seedbox_data.service"
|
||||
];
|
||||
partOf = [
|
||||
"podman-compose-seedbox-lite-root.target"
|
||||
];
|
||||
wantedBy = [
|
||||
"podman-compose-seedbox-lite-root.target"
|
||||
];
|
||||
};
|
||||
virtualisation.oci-containers.containers."seedbox-frontend" = {
|
||||
image = "localhost/compose2nix/seedbox-frontend";
|
||||
ports = [
|
||||
"${port}:80/tcp"
|
||||
];
|
||||
dependsOn = [
|
||||
"seedbox-backend"
|
||||
];
|
||||
log-driver = "journald";
|
||||
extraOptions = [
|
||||
"--network-alias=seedbox-frontend"
|
||||
"--network=seedbox-lite_seedbox-network"
|
||||
];
|
||||
};
|
||||
systemd.services."podman-seedbox-frontend" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
};
|
||||
after = [
|
||||
"podman-network-seedbox-lite_seedbox-network.service"
|
||||
];
|
||||
requires = [
|
||||
"podman-network-seedbox-lite_seedbox-network.service"
|
||||
];
|
||||
partOf = [
|
||||
"podman-compose-seedbox-lite-root.target"
|
||||
];
|
||||
wantedBy = [
|
||||
"podman-compose-seedbox-lite-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
# Networks
|
||||
systemd.services."podman-network-seedbox-lite_seedbox-network" = {
|
||||
path = [pkgs.podman];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "podman network rm -f seedbox-lite_seedbox-network";
|
||||
# Volumes
|
||||
systemd.services."docker-volume-seedbox-lite_seedbox_cache" = {
|
||||
path = [pkgs.docker];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
script = ''
|
||||
docker volume inspect seedbox-lite_seedbox_cache || docker volume create seedbox-lite_seedbox_cache --driver=local
|
||||
'';
|
||||
partOf = ["docker-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["docker-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
systemd.services."docker-volume-seedbox-lite_seedbox_data" = {
|
||||
path = [pkgs.docker];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
script = ''
|
||||
docker volume inspect seedbox-lite_seedbox_data || docker volume create seedbox-lite_seedbox_data --driver=local
|
||||
'';
|
||||
partOf = ["docker-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["docker-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
script = ''
|
||||
podman network inspect seedbox-lite_seedbox-network || podman network create seedbox-lite_seedbox-network --driver=bridge
|
||||
'';
|
||||
partOf = ["podman-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["podman-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
|
||||
# Volumes
|
||||
systemd.services."podman-volume-seedbox-lite_seedbox_cache" = {
|
||||
path = [pkgs.podman];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
# Builds
|
||||
systemd.services."docker-build-seedbox-backend" = {
|
||||
path = [pkgs.docker pkgs.git];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
TimeoutSec = 300;
|
||||
};
|
||||
script = ''
|
||||
cd /tmp
|
||||
git clone https://github.com/hotheadhacker/seedbox-lite.git && cd seedbox-lite/server || cd seedbox-lite/server
|
||||
podman build -t compose2nix/seedbox-backend .
|
||||
'';
|
||||
};
|
||||
script = ''
|
||||
podman volume inspect seedbox-lite_seedbox_cache || podman volume create seedbox-lite_seedbox_cache --driver=local
|
||||
'';
|
||||
partOf = ["podman-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["podman-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
systemd.services."podman-volume-seedbox-lite_seedbox_data" = {
|
||||
path = [pkgs.podman];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
systemd.services."docker-build-seedbox-frontend" = {
|
||||
path = [pkgs.docker pkgs.git];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
TimeoutSec = 300;
|
||||
};
|
||||
script = ''
|
||||
cd /tmp
|
||||
git clone https://github.com/hotheadhacker/seedbox-lite.git && cd seedbox-lite/client || cd seedbox-lite/client
|
||||
podman build -t compose2nix/seedbox-frontend --build-arg VITE_API_BASE_URL=http://localhost:${toString bport} .
|
||||
'';
|
||||
};
|
||||
script = ''
|
||||
podman volume inspect seedbox-lite_seedbox_data || podman volume create seedbox-lite_seedbox_data --driver=local
|
||||
'';
|
||||
partOf = ["podman-compose-seedbox-lite-root.target"];
|
||||
wantedBy = ["podman-compose-seedbox-lite-root.target"];
|
||||
};
|
||||
|
||||
# Builds
|
||||
systemd.services."podman-build-seedbox-backend" = {
|
||||
path = [pkgs.podman pkgs.git];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
TimeoutSec = 300;
|
||||
# Root service
|
||||
# When started, this will automatically create all resources and start
|
||||
# the containers. When stopped, this will teardown all resources.
|
||||
systemd.targets."docker-compose-seedbox-lite-root" = {
|
||||
unitConfig = {
|
||||
Description = "Root target generated by compose2nix.";
|
||||
};
|
||||
wantedBy = ["multi-user.target"];
|
||||
};
|
||||
script = ''
|
||||
cd /tmp
|
||||
git clone https://github.com/hotheadhacker/seedbox-lite.git
|
||||
cd seedbox-lite/server
|
||||
podman build -t compose2nix/seedbox-backend .
|
||||
'';
|
||||
};
|
||||
systemd.services."podman-build-seedbox-frontend" = {
|
||||
path = [pkgs.podman pkgs.git];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
TimeoutSec = 300;
|
||||
};
|
||||
script = ''
|
||||
cd /tmp
|
||||
git clone https://github.com/hotheadhacker/seedbox-lite.git
|
||||
cd seedbox-lite/client
|
||||
podman build -t compose2nix/seedbox-frontend --build-arg VITE_API_BASE_URL=http://localhost:${backend-port} .
|
||||
'';
|
||||
};
|
||||
|
||||
# Root service
|
||||
# When started, this will automatically create all resources and start
|
||||
# the containers. When stopped, this will teardown all resources.
|
||||
systemd.targets."podman-compose-seedbox-lite-root" = {
|
||||
unitConfig = {
|
||||
Description = "Root target generated by compose2nix.";
|
||||
};
|
||||
wantedBy = ["multi-user.target"];
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue