draft AZ-PRM-1 config

hosts/AZ-PRM-1/services/containers/baserow.nix

@@ -0,0 +1,26 @@
+{config, ...}: {
+  virtualisation.oci-containers.containers."baserow" = {
+    image = "docker.io/baserow/baserow:1.34.2";
+    environmentFiles = [config.age.secrets.baserow-env.path];
+    ports = ["127.0.0.1:3032:80"];
+    volumes = ["baserow_data:/baserow/data"];
+    extraOptions = ["--add-host=postgres:10.89.0.1" "--ip=10.89.0.11" "--network=web"];
+  };
+  # Traefik configuration specific to baserow
+  services.traefik.dynamicConfigOptions.http = {
+    services.baserow.loadBalancer.servers = [
+      {
+        url = "http://localhost:3032/";
+      }
+    ];
+
+    routers.baserow = {
+      rule = "Host(`db.i.az-intec.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = "baserow";
+      entrypoints = "websecure";
+    };
+  };
+}

hosts/AZ-PRM-1/services/containers/default.nix

@@ -0,0 +1,6 @@
+{
+  imports = [
+    #./baserow.nix
+    #./kestra.nix
+  ];
+}

hosts/AZ-PRM-1/services/containers/kestra.nix

@@ -0,0 +1,34 @@
+{ config, ... }: {
+  virtualisation.oci-containers.containers."kestra" = {
+    image = "docker.io/kestra/kestra:latest";
+    environmentFiles = [ config.age.secrets.kestra-env.path ];
+    cmd = [ "server" "standalone" "--config" "/etc/config/application.yaml"];
+    ports = [ "127.0.0.1:3031:8080" ];
+    user = "root";
+    volumes = [
+      "/var/run/docker.sock:/var/run/docker.sock"
+      "${config.age.secrets.kestra-config.path}:/etc/config/application.yaml"
+      "kestra_data:/app/storage"
+      "/tmp/kestra-wd:/tmp/kestra-wd"
+    ];
+    extraOptions =
+      [ "--add-host=postgres:10.89.0.1" "--ip=10.89.0.12" "--network=web" ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /tmp/kestra-wd 0750 1000 1000 - -"
+  ];
+
+  # Traefik configuration specific to littlelink
+  services.traefik.dynamicConfigOptions.http = {
+    services.kestra.loadBalancer.servers =
+      [{ url = "http://localhost:3031/"; }];
+
+    routers.kestra = {
+      rule = "Host(`k.i.az-intec.com`)";
+      tls = { certResolver = "ionos"; };
+      service = "kestra";
+      entrypoints = "websecure";
+    };
+  };
+}