compose2nix

system-config/services/containers/pihole/default.nix

@@ -1,29 +1,21 @@
-{ config, lib, pkgs, ... }: {
+{ config, lib, ... }: {
 
     options.sysconfig.opts.virtualization.pihole.enable = lib.options.mkOption {
         type = lib.types.bool;
         default = false;
     };
 
-    config = lib.mkIf config.sysconfig.opts.virtualization.pihole.enable {
-        
-        sops.templates."pihole.env" = {
-            content = ''
-                WEBPASSWORD=${config.sops.placeholder."pihole/pass"}
-            '';
+    config = lib.mkIf config.sysconfig.opts.virtualization.pihole.enable (lib.mkMerge [
 
-            path = "/ssd1/Pihole/.env";
-        };
-        systemd.services.launchPihole = {
+        (import ./docker-compose.nix)
+        {
+            sops.templates."pihole.env" = {
+                content = ''
+                    WEBPASSWORD=${config.sops.placeholder."pihole/pass"}
+                '';
 
-            enable = false;
-            
-            wantedBy = [ "multi-user.target" ];
-
-            script = ''
-                cd /ssd1/Pihole
-                ${pkgs.docker-compose}/bin/docker-compose up
-            '';
-        };
-    };
+                path = "/ssd1/Pihole/.env";
+            };
+        }
+    ]);
 }

system-config/services/containers/pihole/docker-compose.nix

@@ -0,0 +1,123 @@
+# Auto-generated using compose2nix v0.3.2-pre.
+{ pkgs, lib, ... }:
+
+{
+  # Runtime
+  virtualisation.podman = {
+    enable = true;
+    autoPrune.enable = true;
+    dockerCompat = true;
+    defaultNetwork.settings = {
+      # Required for container networking to be able to use names.
+      dns_enabled = true;
+    };
+  };
+
+  # Enable container name DNS for non-default Podman networks.
+  # https://github.com/NixOS/nixpkgs/issues/226365
+  networking.firewall.interfaces."podman+".allowedUDPPorts = [ 53 ];
+
+  virtualisation.oci-containers.backend = "podman";
+
+  # Containers
+  virtualisation.oci-containers.containers."pihole" = {
+    image = "pihole/pihole:latest";
+    environment = {
+      "PIHOLE_DNS" = "'192.168.101.2#5335'";
+      "TZ" = "'America/Chicago'";
+    };
+    environmentFiles = [
+        "/ssd1/Pihole/.env"
+    ];
+    volumes = [
+      "/ssd1/Pihole/etc-dnsmasq.d:/etc/dnsmasq.d:rw"
+      "/ssd1/Pihole/etc-pihole:/etc/pihole:rw"
+    ];
+    ports = [
+      "53:53/tcp"
+      "53:53/udp"
+      "8080:80/tcp"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--ip=192.168.101.1"
+      "--network-alias=pihole"
+      "--network=pihole_dns_net"
+    ];
+  };
+  systemd.services."podman-pihole" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+    };
+    after = [
+      "podman-network-pihole_dns_net.service"
+    ];
+    requires = [
+      "podman-network-pihole_dns_net.service"
+    ];
+    partOf = [
+      "podman-compose-pihole-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-pihole-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."unbound" = {
+    image = "mvance/unbound:latest";
+    volumes = [
+      "/ssd1/Pihole/unbound:/opt/unbound/etc/unbound:rw"
+    ];
+    ports = [
+      "5335:53/tcp"
+      "5335:53/udp"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--ip=192.168.101.2"
+      "--network-alias=unbound"
+      "--network=pihole_dns_net"
+    ];
+  };
+  systemd.services."podman-unbound" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+    };
+    after = [
+      "podman-network-pihole_dns_net.service"
+    ];
+    requires = [
+      "podman-network-pihole_dns_net.service"
+    ];
+    partOf = [
+      "podman-compose-pihole-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-pihole-root.target"
+    ];
+  };
+
+  # Networks
+  systemd.services."podman-network-pihole_dns_net" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStop = "podman network rm -f pihole_dns_net";
+    };
+    script = ''
+      podman network inspect pihole_dns_net || podman network create pihole_dns_net --driver=bridge --subnet=192.168.0.0/16
+    '';
+    partOf = [ "podman-compose-pihole-root.target" ];
+    wantedBy = [ "podman-compose-pihole-root.target" ];
+  };
+
+  # Root service
+  # When started, this will automatically create all resources and start
+  # the containers. When stopped, this will teardown all resources.
+  systemd.targets."podman-compose-pihole-root" = {
+    unitConfig = {
+      Description = "Root target generated by compose2nix.";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+}