server/nixos/backend/fic-synchro.nix
2024-04-19 11:46:51 +02:00

40 lines
1.3 KiB
Nix

{ config, inputs, pkgs, ... }:
{
config.virtualisation.oci-containers.containers.fic-synchro =
{
image = "fic-synchro:latest";
imageFile = pkgs.dockerTools.buildImage {
name = "fic-synchro";
tag = "latest";
created = "now";
copyToRoot = pkgs.buildEnv {
name = "packagelist";
paths = [ pkgs.coreutils pkgs.openssh pkgs.rsync ];
};
config = {
Cmd = [ "${inputs.ficpkgs.packages.x86_64-linux.fic-synchro}/bin/synchro" ];
};
runAsRoot = ''
#!${pkgs.runtimeShell}
${pkgs.dockerTools.shadowSetup}
mkdir -p /tmp/
chmod a+rwx /tmp/
'';
};
autoStart = true;
extraOptions = [ "--network=phobos-lan" "--ip=172.18.0.43" ];
volumes = [
"/etc/hosts:/etc/hosts:ro"
"/var/lib/fic/ssh:/etc/ssh:ro"
"${config.sops.secrets.phobos_ssh.path}:/root/.ssh/id_ed25519:ro"
"/var/lib/fic/files:/srv/FILES:ro"
#"/var/lib/fic/pki/ca.key:/srv/PKI/ca.key:ro"
"/var/lib/fic/pki/shared:/srv/PKI/shared:ro"
"/var/lib/fic/settingsdist:/srv/SETTINGSDIST:ro"
"/var/lib/fic/submissions:/srv/submissions"
"/var/lib/fic/teams:/srv/TEAMS:ro"
"/var/log/frontend:/var/log/frontend"
];
};
}