1
0
Fork 0

tanker: disable remaining containers

This commit is contained in:
Daniel Kempkens 2024-07-04 00:42:58 +02:00
parent 2361374a79
commit 9b9251bbf3
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
3 changed files with 1 additions and 21 deletions

View file

@ -47,8 +47,6 @@
};
};
systemd.services.redis-proxitok.after = [ "podman-wait-for-host-interface.service" ];
networking.firewall.interfaces."podman+".allowedTCPPorts = [ 6381 ];
services.nginx.virtualHosts."tictac.daniel.sx" = {

View file

@ -44,8 +44,6 @@ in
(import ../nixos/redlib.nix (args // { inherit secret; }))
../nixos/linkding.nix
../nixos/mastodon.nix
../nixos/miniflux.nix
@ -60,9 +58,6 @@ in
../nixos/websites-tanker.nix
../nixos/weewx.nix
../../container/proxitok
#../../container/weewx
];
system.stateVersion = "22.11";

View file

@ -1,4 +1,4 @@
{ pkgs, config, lib, ... }:
{ config, ... }:
{
virtualisation = {
@ -29,19 +29,6 @@
allowedTCPPorts = [ 53 443 5432 ];
};
# For services that listen on podman0
systemd.services.podman-wait-for-host-interface = {
description = "Wait for podman0 to be available";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
ExecStart = "${lib.getExe pkgs.bash} -c 'until ${pkgs.iproute2}/bin/ip address show podman0; do sleep 1; done'";
TimeoutStartSec = 30;
};
};
# It looks like there is no way to activate the "built-in" service and timer ...
systemd.services.podman-auto-update-custom = {
description = "Run podman auto-update daily";