pin container images and run rootless under lew

This commit is contained in:
Lewis Wynne 2026-04-04 23:23:13 +01:00
parent 07faf5c11e
commit 10a946ade3
2 changed files with 7 additions and 2 deletions

View file

@ -8,7 +8,7 @@
}; };
virtualisation.oci-containers.containers.dokuwiki = { virtualisation.oci-containers.containers.dokuwiki = {
image = "lscr.io/linuxserver/dokuwiki:latest"; image = "lscr.io/linuxserver/dokuwiki:2025-05-14b-ls299";
environment = { environment = {
PUID = "1000"; PUID = "1000";
PGID = "1000"; PGID = "1000";
@ -20,4 +20,6 @@
]; ];
ports = [ "127.0.0.1:8070:80" ]; ports = [ "127.0.0.1:8070:80" ];
}; };
systemd.services.podman-dokuwiki.serviceConfig.User = "lew";
} }

View file

@ -8,13 +8,16 @@
}; };
virtualisation.oci-containers.containers.foundry = { virtualisation.oci-containers.containers.foundry = {
image = "node:22-slim"; image = "node:22.22.2-slim";
cmd = [ "node" "main.js" "--dataPath=/data" ]; cmd = [ "node" "main.js" "--dataPath=/data" ];
workdir = "/app"; workdir = "/app";
user = "1000:1000";
volumes = [ volumes = [
"/srv/foundry/app:/app:ro" "/srv/foundry/app:/app:ro"
"/srv/foundry/data:/data" "/srv/foundry/data:/data"
]; ];
ports = [ "127.0.0.1:30000:30000" ]; ports = [ "127.0.0.1:30000:30000" ];
}; };
systemd.services.podman-foundry.serviceConfig.User = "lew";
} }