lew
102b195d27
Adds a system user 'podman' (uid 900) with subuid/subgid ranges and linger for running OCI containers. Removes podman-specific settings from lew user. DokuWiki switches to sdnotify=healthy since the image has a built-in healthcheck.
24 lines
619 B
Nix
24 lines
619 B
Nix
{ ... }:
|
|
{
|
|
services.caddy.virtualHosts."foundry.ily.rs" = {
|
|
extraConfig = ''
|
|
reverse_proxy localhost:30000
|
|
encode zstd gzip
|
|
'';
|
|
};
|
|
|
|
virtualisation.oci-containers.containers.foundry = {
|
|
image = "node:22.22.2-slim";
|
|
cmd = [ "node" "main.js" "--dataPath=/data" ];
|
|
workdir = "/app";
|
|
podman.user = "podman";
|
|
volumes = [
|
|
"/srv/foundry/app:/app:ro"
|
|
"/srv/foundry/data:/data"
|
|
];
|
|
ports = [ "127.0.0.1:30000:30000" ];
|
|
};
|
|
|
|
# Workaround for NixOS/nixpkgs#410857 until backport of #475089 lands
|
|
systemd.services.podman-foundry.serviceConfig.Delegate = true;
|
|
}
|