1
0
Fork 0
dotfiles/container/proxitok/default.nix

50 lines
1.3 KiB
Nix
Raw Normal View History

2023-03-20 16:06:11 +00:00
{ config, lib, ... }:
2023-02-28 13:55:57 +00:00
{
virtualisation.oci-containers.containers = {
proxitok-web = {
image = "ghcr.io/pablouser1/proxitok:master";
dependsOn = [ "proxitok-signer" ];
ports = [ "127.0.0.1:8005:80" ];
environmentFiles = [ config.age.secrets.proxitok-environment.path ];
volumes = [
"/etc/container-proxitok/cache:/cache"
];
extraOptions = [
"--label=com.centurylinklabs.watchtower.enable=true"
"--label=io.containers.autoupdate=registry"
];
};
2023-02-28 13:55:57 +00:00
proxitok-signer = {
image = "ghcr.io/pablouser1/signtok:master";
extraOptions = [
"--label=com.centurylinklabs.watchtower.enable=true"
"--label=io.containers.autoupdate=registry"
];
2023-02-28 13:55:57 +00:00
};
};
2023-03-20 16:04:58 +00:00
# The proxitok-signer container doesn't play nicely with SIGTERM
systemd.services.podman-proxitok-signer.serviceConfig = {
2023-03-20 16:06:11 +00:00
TimeoutStopSec = lib.mkForce 2;
2023-03-20 16:04:58 +00:00
};
2023-02-28 14:22:22 +00:00
systemd.tmpfiles.rules = [
"d /etc/container-proxitok/cache 0755 33 33"
];
services.nginx.virtualHosts."tictac.daniel.sx" = {
http3 = true;
2023-03-06 09:21:34 +00:00
onlySSL = true;
useACMEHost = "daniel.sx";
basicAuthFile = config.age.secrets.proxitok-auth.path;
2023-02-28 13:55:57 +00:00
locations."/" = {
recommendedProxySettings = true;
proxyPass = "http://127.0.0.1:8005";
2023-02-28 13:55:57 +00:00
};
};
}