Initial commit

virtualization/portainer.nix

@@ -0,0 +1,81 @@
+{ pkgs, lib, config, ... }: {
+  users.users.portainer = {
+    autoSubUidGidRange = true;
+    isSystemUser = true;
+    group = "podman";
+    home = "/var/lib/portainer";
+    # linger = true;
+    createHome = true;
+  };
+
+  virtualisation.oci-containers.containers.portainer = {
+    autoStart = true;
+    image = "portainer/portainer-ce:lts";
+    #privileged = true;
+    volumes = [
+      #"/var/run/docker.sock:/var/run/docker.sock:rw"
+      "/run/podman/podman.sock:/var/run/docker.sock"
+      "portainer_portainer_data:/data:rw"
+    ];
+    ports = [ "8000:8000" "9443:9443" "9000:9000" ];
+    log-driver = "journald";
+    # extraOptions =
+    #   [ "--network-alias=portainer" "--network=portainer_default" ];
+    environment = {
+      PUID = "997";
+      PGID = "997";
+      TZ = "America/Chicago";
+    };
+  };
+
+#   systemd.services."podman-portainer" = {
+#     serviceConfig = { Restart = lib.mkOverride 90 "always"; };
+#     after = [
+#       "podman-network-portainer_default.service"
+#       "podman-volume-portainer_portainer_data.service"
+#     ];
+#     requires = [
+#       "podman-network-portainer_default.service"
+#       "podman-volume-portainer_portainer_data.service"
+#     ];
+#     partOf = [ "podman-compose-portainer-root.target" ];
+#     wantedBy = [ "podman-compose-portainer-root.target" ];
+#   };
+
+#   # Networks
+#   systemd.services."podman-network-portainer_default" = {
+#     path = [ pkgs.podman ];
+#     serviceConfig = {
+#       Type = "oneshot";
+#       RemainAfterExit = true;
+#       ExecStop = "podman network rm -f portainer_default";
+#     };
+#     script = ''
+#       podman network inspect portainer_default || podman network create portainer_default
+#     '';
+#     partOf = [ "podman-compose-portainer-root.target" ];
+#     wantedBy = [ "podman-compose-portainer-root.target" ];
+#   };
+
+#   # Volumes
+#   systemd.services."podman-volume-portainer_portainer_data" = {
+#     path = [ pkgs.podman ];
+#     serviceConfig = {
+#       Type = "oneshot";
+#       RemainAfterExit = true;
+#     };
+#     script = ''
+#       podman volume inspect portainer_portainer_data || podman volume create portainer_portainer_data
+#     '';
+#     partOf = [ "podman-compose-portainer-root.target" ];
+#     wantedBy = [ "podman-compose-portainer-root.target" ];
+#   };
+
+#   # Root service
+#   # When started, this will automatically create all resources and start
+#   # the containers. When stopped, this will teardown all resources.
+#   systemd.targets."podman-compose-portainer-root" = {
+#     unitConfig = { Description = "Root target generated by compose2nix."; };
+#     wantedBy = [ "multi-user.target" ];
+#   };
+}