Compare commits

..
2 Commits
Author SHA1 Message Date
k3t cc8b2636db modify mautrix.nix 2026-07-28 09:49:40 -06:00
k3t acc6970571 move podman config to more suitable location 2026-07-28 09:49:34 -06:00
3 changed files with 99 additions and 43 deletions
+14
View File
@@ -14,6 +14,20 @@
networking.hostName = "nixcloud"; # Define your hostname. networking.hostName = "nixcloud"; # Define your hostname.
# podman
virtualisation.podman = {
enable = true;
autoPrune.enable = true;
dockerCompat = true; # optional; lets you use `docker` CLI
};
virtualisation.oci-containers.backend = "podman";
# Enable container name DNS for all Podman networks.
networking.firewall.interfaces = let
matchAll = if !config.networking.nftables.enable then "podman+" else "podman*";
in {
"${matchAll}".allowedUDPPorts = [ 53 ];
};
# Define a user account. Don't forget to set a password with passwd. # Define a user account. Don't forget to set a password with passwd.
users.users = { users.users = {
@@ -3,21 +3,6 @@
{ pkgs, lib, config, ... }: { pkgs, lib, config, ... }:
{ {
# Runtime
virtualisation.podman = {
enable = true;
autoPrune.enable = true;
dockerCompat = true;
};
# Enable container name DNS for all Podman networks.
networking.firewall.interfaces = let
matchAll = if !config.networking.nftables.enable then "podman+" else "podman*";
in {
"${matchAll}".allowedUDPPorts = [ 53 ];
};
virtualisation.oci-containers.backend = "podman";
# Containers # Containers
virtualisation.oci-containers.containers."matrix-mautrix-bluesky" = { virtualisation.oci-containers.containers."matrix-mautrix-bluesky" = {
+85 -28
View File
@@ -1,41 +1,98 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
{ {
virtualisation.podman = {
enable = true; virtualisation.oci-containers.containers."minecraft-server" = {
autoPrune.enable = true; image = "ghcr.io/graalvm/graalvm-community:25";
dockerCompat = true; # optional; lets you use `docker` CLI volumes = [
"/var/lib/minecraft:/data:rw"
];
ports = [
"25565:25565/tcp"
"24454:24454/udp"
];
extraOptions = [
"--network-alias=minecraft-server"
"--network=minecraft_default"
"--tty"
"--interactive"
];
entrypoint = "/data/run.sh";
log-driver = "journald";
}; };
systemd.services.minecraft-container = { systemd.services."podman-minecraft-server" = {
description = "Minecraft Server Container (GraalVM JVM 25)";
after = [ "network-online.target" ];
wants = [ "network-online.target" ];
serviceConfig = { serviceConfig = {
ExecStart = '' Restart = lib.mkOverride 90 "always";
${pkgs.podman}/bin/podman run \ };
--rm \ after = [
--name minecraft-server \ "podman-network-minecraft_default.service"
-v /var/lib/minecraft:/data \ ];
-p 25565:25565 \ requires = [
-p 24454:24454/udp \ "podman-network-minecraft_default.service"
ghcr.io/graalvm/graalvm-community:25 \ ];
/data/run.sh partOf = [
''; "podman-compose-minecraft-root.target"
ExecStop = "${pkgs.podman}/bin/podman stop minecraft-server"; ];
Restart = "always"; wantedBy = [
RestartSec = "10s"; "podman-compose-minecraft-root.target"
];
}; };
# Ensure the directory exists # Networks
preStart = '' systemd.services."podman-network-minecraft_default" = {
mkdir -p /var/lib/minecraft path = [ pkgs.podman ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
ExecStop = "podman network rm -f minecraft_default";
};
script = ''
podman network inspect minecraft_default || podman network create minecraft_default
''; '';
partOf = [ "podman-compose-minecraft-root.target" ];
wantedBy = [ "podman-compose-minecraft-root.target" ];
};
# Root service
# When started, this will automatically create all resources and start
# the containers. When stopped, this will teardown all resources.
systemd.targets."podman-compose-minecraft-root" = {
unitConfig = {
Description = "Root target";
};
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
}; };
# Give Podman permission to access persistent storage #systemd.services.minecraft-container = {
systemd.tmpfiles.rules = [ # description = "Minecraft Server Container (GraalVM JVM 25)";
"d /var/lib/minecraft 0755 root root" # after = [ "network-online.target" ];
]; # wants = [ "network-online.target" ];
# serviceConfig = {
# ExecStart = ''
# ${pkgs.podman}/bin/podman run \
# --rm \
# --name minecraft-server \
# -v /var/lib/minecraft:/data \
# -p 25565:25565 \
# -p 24454:24454/udp \
# ghcr.io/graalvm/graalvm-community:25 \
# /data/run.sh
# '';
# ExecStop = "${pkgs.podman}/bin/podman stop minecraft-server";
# Restart = "always";
# RestartSec = "10s";
# };
#
# # Ensure the directory exists
# preStart = ''
# mkdir -p /var/lib/minecraft
# '';
# wantedBy = [ "multi-user.target" ];
#};
#
## Give Podman permission to access persistent storage
#systemd.tmpfiles.rules = [
# "d /var/lib/minecraft 0755 root root"
#];
} }