61 lines
1.5 KiB
Nix
61 lines
1.5 KiB
Nix
{ config, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.settings.containers.static;
|
|
in {
|
|
options = {
|
|
settings.containers.static.enable = lib.mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = ''
|
|
Enable static pages containers
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
settings.services.sops.enable = true;
|
|
|
|
services.podman.containers.wrbapp = {
|
|
image = "gitea.xeovalyte.dev/xeovalyte/wrbapp:latest";
|
|
network = "proxy";
|
|
environmentFile = [
|
|
"${config.sops.templates."container-wrbapp.env".path}"
|
|
];
|
|
};
|
|
|
|
services.podman.containers.hunshin = {
|
|
image = "gitea.xeovalyte.dev/xeovalyte/hunshin:latest";
|
|
network = "proxy";
|
|
};
|
|
|
|
services.podman.containers.bijlobke = {
|
|
image = "gitea.xeovalyte.dev/xeovalyte/bijlobke:latest";
|
|
network = "proxy";
|
|
};
|
|
|
|
services.podman.containers.ardsite = {
|
|
image = "gitea.xeovalyte.dev/ardsite/ardsite:latest";
|
|
network = "proxy";
|
|
};
|
|
|
|
sops.templates = {
|
|
"container-wrbapp.env" = {
|
|
content = ''
|
|
NUXT_PRIVATE_KEY_ID: "${config.sops.placeholder."containers/wrbapp/private-key-id"}"
|
|
NUXT_PRIVATE_KEY: "${config.sops.placeholder."containers/wrbapp/private-key"}"
|
|
NUXT_CLIENT_ID: "${config.sops.placeholder."containers/wrbapp/client-id"}"
|
|
''
|
|
};
|
|
};
|
|
|
|
sops.secrets = {
|
|
"containers/wrbapp/private-key-id" = { };
|
|
"containers/wrbapp/private-key" = { };
|
|
"containers/wrbapp/client-id" = { };
|
|
};
|
|
};
|
|
}
|