2005
b6107679d1
added logging to all nginx routes
added loki, promtail to scrape nginx logs
turned i2pd back on,
updated my websites version
upgraded all hosts to 24.05
forgejo added bigger limit to upload limit due to docker images
privacy frontends:
added priviblur
libreddit -> redlib
added biblioreads
ddns-updater, changed credentials but there is a bug with porkbun
added penpot
brought back anonymousoverflow
added readme privacy respecting frontends
119 lines
3.2 KiB
Nix
119 lines
3.2 KiB
Nix
# Auto-generated using compose2nix v0.2.0-pre.
|
|
{ pkgs, lib, ... }:
|
|
|
|
{
|
|
services.nginx = {
|
|
virtualHosts = {
|
|
"wikiless.${config.networking.domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = " http://127.0.0.1:8180";
|
|
extraConfig = ''
|
|
access_log /var/log/nginx/$server_name-access.log json_analytics;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."wikiless" = {
|
|
image = "ghcr.io/metastem/wikiless:latest";
|
|
environment = {
|
|
REDIS_HOST = "redis://172.4.0.5:6379";
|
|
};
|
|
ports = [
|
|
"127.0.0.1:8180:8080/tcp"
|
|
];
|
|
dependsOn = [
|
|
"wikiless_redis"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--cap-drop=ALL"
|
|
"--hostname=wikiless"
|
|
"--ip=172.4.0.6"
|
|
"--network-alias=wikiless"
|
|
"--network=docker-compose_wikiless_net"
|
|
"--security-opt=no-new-privileges:true"
|
|
];
|
|
};
|
|
systemd.services."podman-wikiless" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 500 "always";
|
|
};
|
|
after = [
|
|
"podman-network-docker-compose_wikiless_net.service"
|
|
];
|
|
requires = [
|
|
"podman-network-docker-compose_wikiless_net.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-docker-compose-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-docker-compose-root.target"
|
|
];
|
|
};
|
|
virtualisation.oci-containers.containers."wikiless_redis" = {
|
|
image = "redis:latest";
|
|
user = "nobody";
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--cap-add=DAC_OVERRIDE"
|
|
"--cap-add=SETGID"
|
|
"--cap-add=SETUID"
|
|
"--cap-drop=ALL"
|
|
"--hostname=wikiless_redis"
|
|
"--ip=172.4.0.5"
|
|
"--network-alias=wikiless_redis"
|
|
"--network=docker-compose_wikiless_net"
|
|
"--security-opt=no-new-privileges:true"
|
|
];
|
|
};
|
|
systemd.services."podman-wikiless_redis" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 500 "always";
|
|
};
|
|
after = [
|
|
"podman-network-docker-compose_wikiless_net.service"
|
|
];
|
|
requires = [
|
|
"podman-network-docker-compose_wikiless_net.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-docker-compose-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-docker-compose-root.target"
|
|
];
|
|
};
|
|
|
|
# Networks
|
|
systemd.services."podman-network-docker-compose_wikiless_net" = {
|
|
path = [ pkgs.podman ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
ExecStop = "${pkgs.podman}/bin/podman network rm -f docker-compose_wikiless_net";
|
|
};
|
|
script = ''
|
|
podman network inspect docker-compose_wikiless_net || podman network create docker-compose_wikiless_net --subnet=172.4.0.0/16
|
|
'';
|
|
partOf = [ "podman-compose-docker-compose-root.target" ];
|
|
wantedBy = [ "podman-compose-docker-compose-root.target" ];
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."podman-compose-docker-compose-root" = {
|
|
unitConfig = {
|
|
Description = "Root target generated by compose2nix.";
|
|
};
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
}
|
|
|