m3ta-chiron
f1481dc256
- port registry: atrocore = 3058 - oci-container atrocore: Gitea-registry image, 127.0.0.1:3058:80, web network, static ip 10.89.0.16, db alias to host pg, env-file from agenix, named volume for instance data, registry login via token secret - agenix secrets: atrocore-env (ATRO_DB_*) + atrocore-registry-token, age-encrypted to AZ-PRM-1 + user, non-interactive creation - host postgres 17: idempotent atrocore-db-init oneshot (psql peer, secret only at runtime), pg_hba 10.89.0.0/24 scram-sha-256, atrocore in 03:10 backup list - traefik: pim.l.az-gruppe.com -> localhost:3058 (ionos, websecure)
19 lines
574 B
Nix
19 lines
574 B
Nix
{lib, ...}: {
|
|
imports = [
|
|
#./baserow.nix
|
|
./atrocore.nix
|
|
./excalidraw.nix
|
|
./kestra.nix
|
|
./online3dviewer.nix
|
|
./stirling-pdf.nix
|
|
];
|
|
system.activationScripts.createPodmanNetworkWeb = lib.mkAfter ''
|
|
if ! /run/current-system/sw/bin/podman network exists web; then
|
|
/run/current-system/sw/bin/podman network create web --subnet=10.89.0.0/24 --internal
|
|
fi
|
|
if ! /run/current-system/sw/bin/podman network exists web-dev; then
|
|
/run/current-system/sw/bin/podman network create web-dev --subnet=10.89.1.0/24 --internal
|
|
fi
|
|
'';
|
|
}
|