tbarnouin/nixos-hypervisor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Working docker VM

Browse source
This commit is contained in:
Théo Barnouin 2025-05-14 12:37:19 +02:00
parent 44ee220627
commit d8ccf817fe
1 changed files with 164 additions and 183 deletions
Download patch file Download diff file Expand all files Collapse all files

63
services/docker/default.nix
View file

@ -14,18 +14,20 @@ in {
}; };
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
age.secrets.docker-lapi-key = { age.secrets = {
docker-lapi-key = {
file = ../../secrets/docker-lapi-key.age; file = ../../secrets/docker-lapi-key.age;
owner = "crowdsec"; owner = "crowdsec";
}; };
age.secrets.docker-gluetun-env = { docker-gluetun-env = {
file = ./secrets/docker-gluetun-env.age; file = ./secrets/docker-gluetun-env.age;
owner = "tbarnouin"; owner = "tbarnouin";
}; };
age.secrets.docker-qbittorrent-env = { docker-qbittorrent-env = {
file = ./secrets/docker-qbittorrent-env.age; file = ./secrets/docker-qbittorrent-env.age;
owner = "tbarnouin"; owner = "tbarnouin";
}; };
};
users.users.tbarnouin.extraGroups = ["docker"]; users.users.tbarnouin.extraGroups = ["docker"];
fileSystems = { fileSystems = {
"/mnt/docker-data" = { "/mnt/docker-data" = {
@ -41,6 +43,20 @@ in {
]; ];
}; };
}; };
services.crowdsec = {
settings.lapi.credentialsFile = "${config.age.secrets.docker-lapi-key.path}";
localConfig = {
acquisitions = [
{
source = "journalctl";
journalctl_filter = ["_SYSTEMD_UNIT=docker.service"];
labels = {
type = "syslog";
};
}
];
};
};
virtualisation = { virtualisation = {
docker = { docker = {
enable = true; enable = true;
@ -51,10 +67,9 @@ in {
data-root = "/mnt/docker-data"; data-root = "/mnt/docker-data";
}; };
}; };
oci-containers.backend = "docker"; oci-containers = {
}; backend = "docker";
containers = {
virtualisation.oci-containers.containers = {
"gluetun" = { "gluetun" = {
autoStart = true; autoStart = true;
image = "ghcr.io/qdm12/gluetun:latest"; image = "ghcr.io/qdm12/gluetun:latest";
@ -126,10 +141,6 @@ in {
"6767:6767/tcp" "6767:6767/tcp"
]; ];
log-driver = "journald"; log-driver = "journald";
extraOptions = [
"--network-alias=bazarr"
"--network=arr-box_default"
];
}; };
"jellyseerr" = { "jellyseerr" = {
image = "fallenbagel/jellyseerr:latest"; image = "fallenbagel/jellyseerr:latest";
@ -144,10 +155,6 @@ in {
"5055:5055/tcp" "5055:5055/tcp"
]; ];
log-driver = "journald"; log-driver = "journald";
extraOptions = [
"--network-alias=jellyseerr"
"--network=arr-box_default"
];
}; };
"prowlarr" = { "prowlarr" = {
image = "lscr.io/linuxserver/prowlarr:latest"; image = "lscr.io/linuxserver/prowlarr:latest";
@ -164,10 +171,6 @@ in {
"9696:9696/tcp" "9696:9696/tcp"
]; ];
log-driver = "journald"; log-driver = "journald";
extraOptions = [
"--network-alias=prowlarr"
"--network=arr-box_default"
];
}; };
"radarr" = { "radarr" = {
image = "lscr.io/linuxserver/radarr:latest"; image = "lscr.io/linuxserver/radarr:latest";
@ -184,10 +187,6 @@ in {
"7878:7878/tcp" "7878:7878/tcp"
]; ];
log-driver = "journald"; log-driver = "journald";
extraOptions = [
"--network-alias=radarr"
"--network=arr-box_default"
];
}; };
"sonarr" = { "sonarr" = {
image = "lscr.io/linuxserver/sonarr:latest"; image = "lscr.io/linuxserver/sonarr:latest";
@ -204,26 +203,8 @@ in {
"8989:8989/tcp" "8989:8989/tcp"
]; ];
log-driver = "journald"; log-driver = "journald";
extraOptions = [
"--network-alias=sonarr"
"--network=arr-box_default"
];
}; };
}; };
services = {
crowdsec = {
settings.lapi.credentialsFile = "${config.age.secrets.docker-lapi-key.path}";
localConfig = {
acquisitions = [
{
source = "journalctl";
journalctl_filter = ["_SYSTEMD_UNIT=docker.service"];
labels = {
type = "syslog";
};
}
];
};
}; };
}; };
}; };