feat: + kestra for AZ-PRM-1

hosts/AZ-CLD-1/services/containers/librechat.nix

@@ -73,7 +73,7 @@ in {
         "librechat_uploads:/app/uploads"
         "librechat_logs:/app/api/logs"
       ];
-      extraOptions = ["--ip=10.89.0.23" "--network=web"];
+      extraOptions = ["--ip=10.89.0.23" "--network=web" "--dns=8.8.8.8" "--dns=8.8.4.4"];
     };
   };
 

hosts/AZ-CLD-1/services/containers/litellm.nix

@@ -9,7 +9,7 @@
 in {
   virtualisation.oci-containers.containers.${serviceName} = {
     #image = "ghcr.io/berriai/litellm:v1.78.5-stable";
-    image = "docker.litellm.ai/berriai/litellm:v1.81.14-stable.gpt-5.4_patch";
+    image = "docker.litellm.ai/berriai/litellm:v1.81.14-stable";
     ports = ["127.0.0.1:${toString servicePort}:4000"];
     environmentFiles = [config.age.secrets.litellm-env.path];
     environment = {

hosts/AZ-PRM-1/default.nix

@@ -5,4 +5,7 @@
     ./secrets.nix
     ./services
   ];
+  extraServices = {
+    podman.enable = true;
+  };
 }

hosts/AZ-PRM-1/secrets.nix

@@ -4,6 +4,11 @@
       traefik-env = {
         file = ../../secrets/traefik-env.age;
       };
+      kestra-config = {
+        file = ../../secrets/kestra-config.age;
+        mode = "644";
+      };
+      kestra-env = {file = ../../secrets/kestra-env.age;};
       n8n-env = {
         file = ../../secrets/n8n-env.age;
       };

hosts/AZ-PRM-1/services/containers/default.nix

@@ -1,7 +1,7 @@
 {lib, ...}: {
   imports = [
     #./baserow.nix
-    # ./kestra.nix
+    ./kestra.nix
     ./stirling-pdf.nix
   ];
   system.activationScripts.createPodmanNetworkWeb = lib.mkAfter ''

hosts/AZ-PRM-1/services/containers/kestra.nix

@@ -1,12 +1,20 @@
-{config, ...}: {
-  virtualisation.oci-containers.containers."kestra" = {
+{
+  config,
+  lib,
+  ...
+}: let
+  serviceName = "kestra";
+  portUtils = import ../../../../lib/port-utils.nix {inherit lib;};
+  servicePort = portUtils.getPort serviceName "AZ-CLD-1";
+in {
+  virtualisation.oci-containers.containers."${serviceName}" = {
     image = "docker.io/kestra/kestra:latest";
     environmentFiles = [config.age.secrets.kestra-env.path];
     cmd = ["server" "standalone" "--config" "/etc/config/application.yaml"];
-    ports = ["127.0.0.1:3031:8080"];
+    ports = ["127.0.0.1:${toString servicePort}:8080"];
     user = "root";
     volumes = [
-      "/var/run/docker.sock:/var/run/docker.sock"
+      "/var/run/podman/podman.sock:/var/run/docker.sock"
       "${config.age.secrets.kestra-config.path}:/etc/config/application.yaml"
       "kestra_data:/app/storage"
       "/tmp/kestra-wd:/tmp/kestra-wd"
@@ -20,7 +28,7 @@
 
   # Traefik configuration specific to littlelink
   services.traefik.dynamicConfigOptions.http = {
-    services.kestra.loadBalancer.servers = [{url = "http://localhost:3031/";}];
+    services.kestra.loadBalancer.servers = [{url = "http://localhost:${toString servicePort}/";}];
 
     routers.kestra = {
       rule = "Host(`k.l.az-gruppe.com`)";