pin container images and run rootless under lew

This commit is contained in:
Lewis Wynne 2026-04-04 23:23:13 +01:00
parent 07faf5c11e
commit 10a946ade3
2 changed files with 7 additions and 2 deletions

View file

@ -8,13 +8,16 @@
};
virtualisation.oci-containers.containers.foundry = {
image = "node:22-slim";
image = "node:22.22.2-slim";
cmd = [ "node" "main.js" "--dataPath=/data" ];
workdir = "/app";
user = "1000:1000";
volumes = [
"/srv/foundry/app:/app:ro"
"/srv/foundry/data:/data"
];
ports = [ "127.0.0.1:30000:30000" ];
};
systemd.services.podman-foundry.serviceConfig.User = "lew";
}