The oci-containers module has native rootless support via podman.user which handles cgroup delegation, runtime dirs, and cidfile paths. Delegate=true workaround for NixOS/nixpkgs#410857.
27 lines
692 B
Nix
27 lines
692 B
Nix
{ ... }:
|
|
{
|
|
services.caddy.virtualHosts."wiki.ily.rs" = {
|
|
extraConfig = ''
|
|
reverse_proxy localhost:8070
|
|
encode zstd gzip
|
|
'';
|
|
};
|
|
|
|
virtualisation.oci-containers.containers.dokuwiki = {
|
|
image = "lscr.io/linuxserver/dokuwiki:2025-05-14b-ls299";
|
|
podman.user = "lew";
|
|
environment = {
|
|
PUID = "1000";
|
|
PGID = "1000";
|
|
TZ = "Europe/London";
|
|
};
|
|
volumes = [
|
|
"/srv/dokuwiki/config:/config"
|
|
"/srv/dokuwiki/cont-init.d:/custom-cont-init.d:ro"
|
|
];
|
|
ports = [ "127.0.0.1:8070:80" ];
|
|
};
|
|
|
|
# Workaround for NixOS/nixpkgs#410857 until backport of #475089 lands
|
|
systemd.services.podman-dokuwiki.serviceConfig.Delegate = true;
|
|
}
|