Move Nix files back to the root of the project
This commit is contained in:
parent
52044d9995
commit
087153a16d
223 changed files with 12 additions and 12 deletions
102
modules/nixos/homelab/containers/beaverhabits.nix
Normal file
102
modules/nixos/homelab/containers/beaverhabits.nix
Normal file
|
@ -0,0 +1,102 @@
|
|||
# Auto-generated using compose2nix v0.3.2-pre.
|
||||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
|
||||
with lib;
|
||||
|
||||
let
|
||||
cfg = config.nixosModules.beaverhabits;
|
||||
|
||||
port = 8084;
|
||||
in
|
||||
{
|
||||
options.nixosModules.beaverhabits.enable = mkEnableOption "Enable beaverhabits";
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
virtualisation = {
|
||||
docker = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
};
|
||||
|
||||
oci-containers = {
|
||||
backend = "docker";
|
||||
|
||||
containers."beaverhabits" = {
|
||||
image = "daya0576/beaverhabits:latest";
|
||||
|
||||
environment = {
|
||||
"HABITS_STORAGE" = "DATABASE";
|
||||
};
|
||||
|
||||
volumes = [
|
||||
"/mnt/media/beaverhabits:/app/.user:rw"
|
||||
];
|
||||
|
||||
ports = [
|
||||
"${toString port}:8080/tcp"
|
||||
];
|
||||
|
||||
user = "1000:1000";
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--network-alias=beaverhabits"
|
||||
"--network=beaverhabits_default"
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
systemd = {
|
||||
services = {
|
||||
"docker-beaverhabits" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
||||
RestartSec = lib.mkOverride 90 "100ms";
|
||||
RestartSteps = lib.mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [ "docker-network-beaverhabits_default.service" ];
|
||||
requires = [ "docker-network-beaverhabits_default.service" ];
|
||||
partOf = [ "docker-compose-beaverhabits-root.target" ];
|
||||
wantedBy = [ "docker-compose-beaverhabits-root.target" ];
|
||||
};
|
||||
|
||||
"docker-network-beaverhabits_default" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "docker network rm -f beaverhabits_default";
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker network inspect beaverhabits_default || docker network create beaverhabits_default
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-beaverhabits-root.target" ];
|
||||
wantedBy = [ "docker-compose-beaverhabits-root.target" ];
|
||||
};
|
||||
};
|
||||
|
||||
targets."docker-compose-beaverhabits-root" = {
|
||||
unitConfig.Description = "Root target generated by compose2nix.";
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
};
|
||||
|
||||
services.caddy.virtualHosts."beaverhabits.oliverdavies.uk" = {
|
||||
useACMEHost = "oliverdavies.uk";
|
||||
|
||||
extraConfig = "reverse_proxy localhost:${toString port}";
|
||||
};
|
||||
};
|
||||
}
|
8
modules/nixos/homelab/containers/default.nix
Normal file
8
modules/nixos/homelab/containers/default.nix
Normal file
|
@ -0,0 +1,8 @@
|
|||
{
|
||||
imports = [
|
||||
./beaverhabits.nix
|
||||
./freshrss.nix
|
||||
./pi-hole.nix
|
||||
./tubearchivist.nix
|
||||
];
|
||||
}
|
109
modules/nixos/homelab/containers/freshrss.nix
Normal file
109
modules/nixos/homelab/containers/freshrss.nix
Normal file
|
@ -0,0 +1,109 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
|
||||
with lib;
|
||||
|
||||
let
|
||||
cfg = config.nixosModules.freshrss;
|
||||
port = 4003;
|
||||
in
|
||||
{
|
||||
options.nixosModules.freshrss.enable = mkEnableOption "Enable freshrss";
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
# Auto-generated using compose2nix v0.3.2-pre.
|
||||
virtualisation = {
|
||||
docker = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
};
|
||||
|
||||
oci-containers.backend = "docker";
|
||||
};
|
||||
|
||||
virtualisation.oci-containers.containers."freshrss" = {
|
||||
image = "lscr.io/linuxserver/freshrss:latest";
|
||||
|
||||
environment = {
|
||||
"PGID" = "1000";
|
||||
"PUID" = "1000";
|
||||
"TZ" = "Etc/UTC";
|
||||
};
|
||||
|
||||
volumes = [
|
||||
"/home/opdavies/Code/dotfiles/freshrss-config:/config:rw"
|
||||
];
|
||||
|
||||
ports = [
|
||||
"${toString port}:80/tcp"
|
||||
];
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--network-alias=freshrss"
|
||||
"--network=freshrss_default"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-freshrss" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
||||
RestartSec = lib.mkOverride 90 "100ms";
|
||||
RestartSteps = lib.mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [
|
||||
"docker-network-freshrss_default.service"
|
||||
];
|
||||
|
||||
requires = [
|
||||
"docker-network-freshrss_default.service"
|
||||
];
|
||||
|
||||
partOf = [
|
||||
"docker-compose-freshrss-root.target"
|
||||
];
|
||||
|
||||
wantedBy = [
|
||||
"docker-compose-freshrss-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-network-freshrss_default" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "docker network rm -f freshrss_default";
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker network inspect freshrss_default || docker network create freshrss_default
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-freshrss-root.target" ];
|
||||
wantedBy = [ "docker-compose-freshrss-root.target" ];
|
||||
};
|
||||
|
||||
systemd.targets."docker-compose-freshrss-root" = {
|
||||
unitConfig = {
|
||||
Description = "Root target generated by compose2nix.";
|
||||
};
|
||||
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
|
||||
services.caddy.virtualHosts."freshrss.oliverdavies.uk" = {
|
||||
useACMEHost = "oliverdavies.uk";
|
||||
|
||||
extraConfig = "reverse_proxy localhost:${toString port}";
|
||||
};
|
||||
};
|
||||
}
|
101
modules/nixos/homelab/containers/pi-hole.nix
Normal file
101
modules/nixos/homelab/containers/pi-hole.nix
Normal file
|
@ -0,0 +1,101 @@
|
|||
{
|
||||
config,
|
||||
pkgs,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
|
||||
with lib;
|
||||
|
||||
let
|
||||
port = 8082;
|
||||
in
|
||||
{
|
||||
options.nixosModules.pihole.enable = mkEnableOption "Enable pihole";
|
||||
|
||||
config = mkIf config.nixosModules.pihole.enable {
|
||||
virtualisation = {
|
||||
docker = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
};
|
||||
|
||||
oci-containers = {
|
||||
backend = "docker";
|
||||
|
||||
containers."pihole" = {
|
||||
image = "pihole/pihole:latest";
|
||||
|
||||
environment = {
|
||||
"PIHOLE_DNS_1" = "8.8.8.8";
|
||||
"PIHOLE_DNS_2" = "8.8.4.4";
|
||||
"TZ" = "Europe/London";
|
||||
};
|
||||
|
||||
volumes = [
|
||||
"/home/opdavies/pihole/etc-dnsmasq.d:/etc/dnsmasq.d:rw"
|
||||
"/home/opdavies/pihole/etc-pihole:/etc/pihole:rw"
|
||||
];
|
||||
|
||||
ports = [
|
||||
"53:53/tcp"
|
||||
"53:53/udp"
|
||||
"67:67/udp"
|
||||
"${toString port}:80/tcp"
|
||||
];
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--cap-add=NET_ADMIN"
|
||||
"--network-alias=pihole"
|
||||
"--network=pihole_default"
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
systemd = {
|
||||
services = {
|
||||
"docker-pihole" = {
|
||||
serviceConfig = {
|
||||
Restart = lib.mkOverride 90 "always";
|
||||
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
||||
RestartSec = lib.mkOverride 90 "100ms";
|
||||
RestartSteps = lib.mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [ "docker-network-pihole_default.service" ];
|
||||
requires = [ "docker-network-pihole_default.service" ];
|
||||
partOf = [ "docker-compose-pihole-root.target" ];
|
||||
wantedBy = [ "docker-compose-pihole-root.target" ];
|
||||
};
|
||||
|
||||
"docker-network-pihole_default" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "docker network rm -f pihole_default";
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker network inspect pihole_default || docker network create pihole_default
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-pihole-root.target" ];
|
||||
wantedBy = [ "docker-compose-pihole-root.target" ];
|
||||
};
|
||||
};
|
||||
|
||||
targets."docker-compose-pihole-root" = {
|
||||
unitConfig = {
|
||||
Description = "Root target generated by compose2nix.";
|
||||
};
|
||||
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
296
modules/nixos/homelab/containers/tubearchivist.nix
Normal file
296
modules/nixos/homelab/containers/tubearchivist.nix
Normal file
|
@ -0,0 +1,296 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
|
||||
with lib;
|
||||
|
||||
let
|
||||
cfg = config.nixosModules.tubearchivist-container;
|
||||
|
||||
port = 8085;
|
||||
url = "tubearchivist.oliverdavies.uk";
|
||||
in
|
||||
{
|
||||
options.nixosModules.tubearchivist-container = {
|
||||
enable = mkEnableOption "Enable the tubearchivist-container service.";
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
virtualisation.docker = {
|
||||
enable = true;
|
||||
autoPrune.enable = true;
|
||||
};
|
||||
|
||||
virtualisation.oci-containers.backend = "docker";
|
||||
|
||||
virtualisation.oci-containers.containers."archivist-es" = {
|
||||
image = "bbilly1/tubearchivist-es";
|
||||
|
||||
environment = {
|
||||
"ES_JAVA_OPTS" = "-Xms1g -Xmx1g";
|
||||
"discovery.type" = "single-node";
|
||||
"path.repo" = "/usr/share/elasticsearch/data/snapshot";
|
||||
"xpack.security.enabled" = "true";
|
||||
};
|
||||
|
||||
environmentFiles = [
|
||||
config.age.secrets.tubearchivist.path
|
||||
];
|
||||
|
||||
volumes = [
|
||||
"tubearchivist_es:/usr/share/elasticsearch/data:rw"
|
||||
];
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--network-alias=archivist-es"
|
||||
"--network=tubearchivist_default"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-archivist-es" = {
|
||||
serviceConfig = {
|
||||
Restart = mkOverride 90 "always";
|
||||
RestartMaxDelaySec = mkOverride 90 "1m";
|
||||
RestartSec = mkOverride 90 "100ms";
|
||||
RestartSteps = mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_es.service"
|
||||
];
|
||||
|
||||
requires = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_es.service"
|
||||
];
|
||||
|
||||
partOf = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
|
||||
wantedBy = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
virtualisation.oci-containers.containers."archivist-redis" = {
|
||||
image = "redis/redis-stack-server";
|
||||
|
||||
volumes = [
|
||||
"tubearchivist_redis:/data:rw"
|
||||
];
|
||||
|
||||
dependsOn = [
|
||||
"archivist-es"
|
||||
];
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--network-alias=archivist-redis"
|
||||
"--network=tubearchivist_default"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-archivist-redis" = {
|
||||
serviceConfig = {
|
||||
Restart = mkOverride 90 "always";
|
||||
RestartMaxDelaySec = mkOverride 90 "1m";
|
||||
RestartSec = mkOverride 90 "100ms";
|
||||
RestartSteps = mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_redis.service"
|
||||
];
|
||||
|
||||
requires = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_redis.service"
|
||||
];
|
||||
|
||||
partOf = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
|
||||
wantedBy = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
virtualisation.oci-containers.containers."tubearchivist" = {
|
||||
image = "bbilly1/tubearchivist";
|
||||
|
||||
environment = {
|
||||
"ES_URL" = "http://archivist-es:9200";
|
||||
"HOST_GID" = "1000";
|
||||
"HOST_UID" = "1000";
|
||||
"REDIS_HOST" = "archivist-redis";
|
||||
"TA_HOST" = url;
|
||||
"TZ" = "Europe/London";
|
||||
};
|
||||
|
||||
environmentFiles = [
|
||||
config.age.secrets.tubearchivist.path
|
||||
];
|
||||
|
||||
volumes = [
|
||||
"/mnt/media/tubearchivist_cache:/cache:rw"
|
||||
"/mnt/media/tubearchivist_media:/youtube:rw"
|
||||
];
|
||||
|
||||
ports = [
|
||||
"${toString port}:8000/tcp"
|
||||
];
|
||||
|
||||
dependsOn = [
|
||||
"archivist-es"
|
||||
"archivist-redis"
|
||||
];
|
||||
|
||||
log-driver = "journald";
|
||||
|
||||
extraOptions = [
|
||||
"--health-cmd=[\"curl\", \"-f\", \"http://localhost:8000/health\"]"
|
||||
"--health-interval=2m0s"
|
||||
"--health-retries=3"
|
||||
"--health-start-period=30s"
|
||||
"--health-timeout=10s"
|
||||
"--network-alias=tubearchivist"
|
||||
"--network=tubearchivist_default"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-tubearchivist" = {
|
||||
serviceConfig = {
|
||||
Restart = mkOverride 90 "always";
|
||||
RestartMaxDelaySec = mkOverride 90 "1m";
|
||||
RestartSec = mkOverride 90 "100ms";
|
||||
RestartSteps = mkOverride 90 9;
|
||||
};
|
||||
|
||||
after = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_cache.service"
|
||||
"docker-volume-tubearchivist_media.service"
|
||||
];
|
||||
|
||||
requires = [
|
||||
"docker-network-tubearchivist_default.service"
|
||||
"docker-volume-tubearchivist_cache.service"
|
||||
"docker-volume-tubearchivist_media.service"
|
||||
];
|
||||
|
||||
partOf = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
|
||||
wantedBy = [
|
||||
"docker-compose-tubearchivist-root.target"
|
||||
];
|
||||
};
|
||||
|
||||
systemd.services."docker-network-tubearchivist_default" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
ExecStop = "docker network rm -f tubearchivist_default";
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker network inspect tubearchivist_default || docker network create tubearchivist_default
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-tubearchivist-root.target" ];
|
||||
wantedBy = [ "docker-compose-tubearchivist-root.target" ];
|
||||
};
|
||||
|
||||
systemd.services."docker-volume-tubearchivist_cache" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker volume inspect tubearchivist_cache || docker volume create tubearchivist_cache
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-tubearchivist-root.target" ];
|
||||
wantedBy = [ "docker-compose-tubearchivist-root.target" ];
|
||||
|
||||
};
|
||||
|
||||
systemd.services."docker-volume-tubearchivist_es" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker volume inspect tubearchivist_es || docker volume create tubearchivist_es
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-tubearchivist-root.target" ];
|
||||
wantedBy = [ "docker-compose-tubearchivist-root.target" ];
|
||||
};
|
||||
|
||||
systemd.services."docker-volume-tubearchivist_media" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker volume inspect tubearchivist_media || docker volume create tubearchivist_media
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-tubearchivist-root.target" ];
|
||||
wantedBy = [ "docker-compose-tubearchivist-root.target" ];
|
||||
};
|
||||
|
||||
systemd.services."docker-volume-tubearchivist_redis" = {
|
||||
path = [ pkgs.docker ];
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
|
||||
script = ''
|
||||
docker volume inspect tubearchivist_redis || docker volume create tubearchivist_redis
|
||||
'';
|
||||
|
||||
partOf = [ "docker-compose-tubearchivist-root.target" ];
|
||||
wantedBy = [ "docker-compose-tubearchivist-root.target" ];
|
||||
};
|
||||
|
||||
systemd.targets."docker-compose-tubearchivist-root" = {
|
||||
unitConfig = {
|
||||
Description = "Root target generated by compose2nix.";
|
||||
};
|
||||
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
|
||||
services.caddy.virtualHosts."tubearchivist.oliverdavies.uk" = {
|
||||
useACMEHost = "oliverdavies.uk";
|
||||
|
||||
extraConfig = "reverse_proxy localhost:${toString port}";
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue