83 lines
2.2 KiB
Nix
83 lines
2.2 KiB
Nix
{ config, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.settings.containers.karakeep;
|
|
in {
|
|
options = {
|
|
settings.containers.karakeep.enable = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = ''
|
|
Enable karakeep container
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
services.podman.containers.karakeep = {
|
|
image = "ghcr.io/karakeep-app/karakeep:release";
|
|
network = "proxy";
|
|
volumes = [
|
|
"%h/containers/karakeep/data:/data"
|
|
];
|
|
environment = {
|
|
MEILI_ADDR = "http://karakeep-meilisearch:7700";
|
|
BROWSER_WEB_URL = "http://karakeep-chrome:9222";
|
|
DATA_DIR = "/data";
|
|
};
|
|
environmentFile = [
|
|
"${config.sops.templates."container-karakeep.env".path}"
|
|
];
|
|
extraConfig = {
|
|
Unit = {
|
|
After = [
|
|
"podman-karakeep-chrome.service"
|
|
"podman-karakeep-meilisearch.service"
|
|
];
|
|
Requires = [
|
|
"podman-karakeep-chrome.service"
|
|
"podman-karakeep-meilisearch.service"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
services.podman.containers.karakeep-chrome = {
|
|
image = "gcr.io/zenika-hub/alpine-chrome:123";
|
|
network = "proxy";
|
|
exec = "--no-sandbox --disable-gpu --disable-dev-shm-usage --remote-debugging-address=0.0.0.0 --remote-debugging-port=9222 --hide-scrollbars";
|
|
};
|
|
|
|
services.podman.containers.karakeep-meilisearch = {
|
|
image = "getmeili/meilisearch:v1.13.3";
|
|
network = "proxy";
|
|
environment = {
|
|
MEILI_NO_ANALYTICS = "true";
|
|
};
|
|
volumes = [
|
|
"%h/containers/karakeep/meilisearch:/meili_data"
|
|
];
|
|
};
|
|
|
|
settings.services.sops.enable = true;
|
|
|
|
sops.secrets = {
|
|
"containers/karakeep/nextauth-secret" = { };
|
|
"containers/karakeep/meili-key" = { };
|
|
};
|
|
|
|
sops.templates = {
|
|
"container-karakeep.env" = {
|
|
content = ''
|
|
KARAKEEP_VERSION=release
|
|
NEXTAUTH_SECRET=${config.sops.placeholder."containers/karakeep/nextauth-secret"}
|
|
MEILI_MASTER_KEY=${config.sops.placeholder."containers/karakeep/meili-key"}
|
|
NEXTAUTH_URL=https://karakeep.local.tbmrs.nl
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
}
|