84 lines
2.2 KiB
Nix
84 lines
2.2 KiB
Nix
# Auto-generated using compose2nix v0.3.1.
|
|
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
imports = [
|
|
../../../../system/sops.nix
|
|
];
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."caddy-web" = {
|
|
environmentFiles = [ config.sops.secrets.caddy_docker_env.path ];
|
|
image = "caddy-custom:2.10.0-builder";
|
|
volumes = [
|
|
"${./volume}:/etc/caddy:ro"
|
|
"caddy_caddy:/data:rw"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--health-cmd=curl -sS -k https://127.0.0.1 || exit 1"
|
|
"--health-interval=10s"
|
|
"--health-retries=3"
|
|
"--health-timeout=10s"
|
|
"--network=host"
|
|
];
|
|
};
|
|
|
|
systemd.services."docker-caddy-web" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "on-failure";
|
|
RestartMaxDelaySec = lib.mkOverride 90 "1m";
|
|
RestartSec = lib.mkOverride 90 "100ms";
|
|
RestartSteps = lib.mkOverride 90 9;
|
|
};
|
|
after = [
|
|
"docker-volume-caddy_caddy.service"
|
|
];
|
|
requires = [
|
|
"docker-volume-caddy_caddy.service"
|
|
];
|
|
partOf = [
|
|
"docker-compose-caddy-root.target"
|
|
];
|
|
wantedBy = [
|
|
"docker-compose-caddy-root.target"
|
|
];
|
|
};
|
|
|
|
# Volumes
|
|
systemd.services."docker-volume-caddy_caddy" = {
|
|
path = [ pkgs.docker ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
};
|
|
script = ''
|
|
docker volume inspect caddy_caddy || docker volume create caddy_caddy
|
|
'';
|
|
partOf = [ "docker-compose-caddy-root.target" ];
|
|
wantedBy = [ "docker-compose-caddy-root.target" ];
|
|
};
|
|
|
|
# Builds
|
|
systemd.services."docker-build-caddy-web" = {
|
|
path = [ pkgs.docker pkgs.git ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
TimeoutSec = 300;
|
|
};
|
|
script = ''
|
|
cd /home/tera/Documents/ops/misc-git/nix-infra/hosts/andromeda/stacks/caddy/caddy
|
|
docker build -t caddy-custom:2.10.0-builder -f ${./volume/Dockerfile} .
|
|
'';
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."docker-compose-caddy-root" = {
|
|
unitConfig = {
|
|
Description = "Root target generated by compose2nix.";
|
|
};
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
}
|