christoph/flake-nixinator
1
Fork 0
Code Activity

System/Thinknix: Add thinknix config

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-10 00:41:05 +02:00
parent a8b4a47cf6
commit 0dfc11363a
7 changed files with 229 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
system/services/nginx-proxy-manager.nix
View File

@ -17,9 +17,7 @@
passwordFile = "${config.sops.secrets.docker-password.path}";
};
dependsOn = [
# "pihole"
];
dependsOn = [];
ports = [
"80:80"

38
system/services/portainer-agent.nix Normal file
View File

@ -0,0 +1,38 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.portainer-agent = {
image = "portainer/agent:latest";
autoStart = true;
login = {
# Uses DockerHub by default
# registry = "";
# DockerHub Credentials
username = "christoph.urlacher@protonmail.com";
passwordFile = "${config.sops.secrets.docker-password.path}";
};
dependsOn = [];
ports = [
"9001:9001"
];
volumes = [
"/var/run/docker.sock:/var/run/docker.sock"
"/var/lib/docker/volumes:/var/lib/docker/volumes"
];
environment = {};
extraOptions = [
# This container needs to be accessible from another machine inside the LAN
# "--net=behind-nginx"
];
};
}

37
system/services/portainer.nix
View File

@ -4,32 +4,8 @@
pkgs,
...
}: {
# virtualisation.oci-containers.containers.portainer = {
# image = "portainer/portainer-ce:latest";
# autoStart = true;
# dependsOn = [];
# ports = [
# # "8000:8000"
# # "9443:9443"
# ];
# volumes = [
# "portainer_config:/data"
# "/var/run/docker.sock:/var/run/docker.sock"
# ];
# environment = {};
# extraOptions = [
# "--net=behind-nginx"
# ];
# };
virtualisation.oci-containers.containers.portainer-agent = {
image = "portainer/agent:latest";
virtualisation.oci-containers.containers.portainer = {
image = "portainer/portainer-ce:latest";
autoStart = true;
login = {
@ -44,19 +20,20 @@
dependsOn = [];
ports = [
"9001:9001"
# "8000:8000"
# "9443:9443"
];
volumes = [
"portainer_config:/data"
"/var/run/docker.sock:/var/run/docker.sock"
"/var/lib/docker/volumes:/var/lib/docker/volumes"
];
environment = {};
extraOptions = [
# This container needs to be accessible from another machine inside the LAN
# "--net=behind-nginx"
"--net=behind-nginx"
];
};
}

43
system/services/wireguard.nix Normal file
View File

@ -0,0 +1,43 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.wireguard = {
image = "linuxserver/wireguard:latest";
autoStart = true;
login = {
# Uses DockerHub by default
# registry = "";
# DockerHub Credentials
username = "christoph.urlacher@protonmail.com";
passwordFile = "${config.sops.secrets.docker-password.path}";
};
dependsOn = [];
ports = [
"51820:51820"
];
volumes = [
"wireguard_vps_config:/config"
"wireguard_vps_modules:/lib/modules"
];
environment = {
PUID = "1000";
PGID = "1000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--cap-add=NET_ADMIN"
"--cap-add=SYS_MODULE"
# "--net=behind-nginx"
];
};
}