126 lines
4.1 KiB
Nix
126 lines
4.1 KiB
Nix
# Auto-generated using compose2nix v0.3.2-pre.
|
|
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
config = lib.mkIf config.sysconfig.opts.virtualization.pihole.enable {
|
|
# Runtime
|
|
virtualisation.podman = {
|
|
enable = true;
|
|
autoPrune.enable = true;
|
|
dockerCompat = true;
|
|
defaultNetwork.settings = {
|
|
# Required for container networking to be able to use names.
|
|
dns_enabled = true;
|
|
};
|
|
};
|
|
|
|
# Enable container name DNS for non-default Podman networks.
|
|
# https://github.com/NixOS/nixpkgs/issues/226365
|
|
networking.firewall.interfaces."podman+".allowedUDPPorts = [ 53 ];
|
|
|
|
virtualisation.oci-containers.backend = "podman";
|
|
|
|
# Containers
|
|
virtualisation.oci-containers.containers."pihole" = {
|
|
image = "pihole/pihole:latest";
|
|
environment = {
|
|
"PIHOLE_DNS" = "'192.169.101.2#5335'";
|
|
"TZ" = "'America/Chicago'";
|
|
};
|
|
environmentFiles = [
|
|
"/ssd1/Pihole/.env"
|
|
];
|
|
volumes = [
|
|
"/ssd1/Pihole/etc-dnsmasq.d:/etc/dnsmasq.d:rw"
|
|
"/ssd1/Pihole/etc-pihole:/etc/pihole:rw"
|
|
];
|
|
ports = [
|
|
"53:53/tcp"
|
|
"53:53/udp"
|
|
"8080:80/tcp"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--ip=192.169.101.1"
|
|
"--network-alias=pihole"
|
|
"--network=pihole_dns_net"
|
|
];
|
|
};
|
|
systemd.services."podman-pihole" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "always";
|
|
};
|
|
after = [
|
|
"podman-network-pihole_dns_net.service"
|
|
];
|
|
requires = [
|
|
"podman-network-pihole_dns_net.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-pihole-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-pihole-root.target"
|
|
];
|
|
};
|
|
virtualisation.oci-containers.containers."unbound" = {
|
|
image = "mvance/unbound:latest";
|
|
volumes = [
|
|
"/ssd1/Pihole/unbound:/opt/unbound/etc/unbound:rw"
|
|
];
|
|
ports = [
|
|
"5335:53/tcp"
|
|
"5335:53/udp"
|
|
];
|
|
log-driver = "journald";
|
|
extraOptions = [
|
|
"--ip=192.169.101.2"
|
|
"--network-alias=unbound"
|
|
"--network=pihole_dns_net"
|
|
];
|
|
};
|
|
systemd.services."podman-unbound" = {
|
|
serviceConfig = {
|
|
Restart = lib.mkOverride 90 "always";
|
|
};
|
|
after = [
|
|
"podman-network-pihole_dns_net.service"
|
|
];
|
|
requires = [
|
|
"podman-network-pihole_dns_net.service"
|
|
];
|
|
partOf = [
|
|
"podman-compose-pihole-root.target"
|
|
];
|
|
wantedBy = [
|
|
"podman-compose-pihole-root.target"
|
|
];
|
|
};
|
|
|
|
# Networks
|
|
systemd.services."podman-network-pihole_dns_net" = {
|
|
path = [ pkgs.podman ];
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
RemainAfterExit = true;
|
|
ExecStop = "podman network rm -f pihole_dns_net";
|
|
};
|
|
script = ''
|
|
podman network inspect pihole_dns_net || podman network create pihole_dns_net --driver=bridge --subnet=192.169.0.0/16
|
|
'';
|
|
partOf = [ "podman-compose-pihole-root.target" ];
|
|
wantedBy = [ "podman-compose-pihole-root.target" ];
|
|
};
|
|
|
|
# Root service
|
|
# When started, this will automatically create all resources and start
|
|
# the containers. When stopped, this will teardown all resources.
|
|
systemd.targets."podman-compose-pihole-root" = {
|
|
unitConfig = {
|
|
Description = "Root target generated by compose2nix.";
|
|
};
|
|
wantedBy = [ "multi-user.target" ];
|
|
};
|
|
};
|
|
}
|