daniel/dotfiles
1
0
Fork 0
Code Activity Actions

arion: Switch to podman

Browse source
This commit is contained in:
Daniel Kempkens 2023-03-16 20:16:06 +01:00
parent 57a8a2bab7
commit a0a6f45a3a
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
1 changed files with 32 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
system/nixos/arion.nix
View file

@ -3,43 +3,51 @@
{ {
environment.systemPackages = [ environment.systemPackages = [
pkgs.arion pkgs.arion
pkgs.docker-client
]; ];
virtualisation = { virtualisation = {
docker = { docker.enable = false;
# docker = {
# enable = true;
# autoPrune = {
# enable = true;
# flags = [ "--all" ];
# };
# };
podman = {
enable = true; enable = true;
autoPrune = { dockerSocket.enable = true;
enable = true; defaultNetwork.dnsname.enable = true;
flags = [ "--all" ];
};
}; };
oci-containers = { oci-containers = {
backend = "docker"; backend = "docker";
containers.watchtower = { # containers.watchtower = {
image = "containrrr/watchtower"; # image = "containrrr/watchtower";
environment = { # environment = {
WATCHTOWER_POLL_INTERVAL = "21600"; # WATCHTOWER_POLL_INTERVAL = "21600";
WATCHTOWER_LABEL_ENABLE = "true"; # WATCHTOWER_LABEL_ENABLE = "true";
WATCHTOWER_NOTIFICATIONS = "shoutrrr"; # WATCHTOWER_NOTIFICATIONS = "shoutrrr";
WATCHTOWER_NOTIFICATIONS_HOSTNAME = config.networking.hostName; # WATCHTOWER_NOTIFICATIONS_HOSTNAME = config.networking.hostName;
WATCHTOWER_NOTIFICATION_URL = secret.watchtower.ntfyUrl; # WATCHTOWER_NOTIFICATION_URL = secret.watchtower.ntfyUrl;
}; # };
volumes = [ # volumes = [
"/var/run/docker.sock:/var/run/docker.sock" # "/var/run/docker.sock:/var/run/docker.sock"
"/root/.docker/config.json:/config.json:ro" # "/root/.docker/config.json:/config.json:ro"
]; # ];
extraOptions = [ # extraOptions = [
"--label=com.centurylinklabs.watchtower.enable=true" # "--label=com.centurylinklabs.watchtower.enable=true"
]; # ];
}; # };
}; };
arion = { arion = {
backend = "docker"; backend = "podman";
}; };
}; };
networking.firewall.interfaces."docker0".allowedTCPPorts = [ 443 ]; # networking.firewall.interfaces."docker0".allowedTCPPorts = [ 443 ];
} }