WIP: Switch to NixOS #5

Draft
FunctionalHacker wants to merge 1349 commits from nix into main
3 changed files with 48 additions and 2 deletions
Showing only changes of commit a15a21b1a4 - Show all commits

View file

@ -1,7 +1,7 @@
[services] [services]
[services.redis] [services.redis]
container_name = "authentik-redis" container_name = "redis-authentik"
image = "redis:alpine" image = "redis:alpine"
restart = "unless-stopped" restart = "unless-stopped"
networks = ["authentik"] networks = ["authentik"]

View file

@ -49,7 +49,7 @@ depends_on = ["redis"]
[services.redis] [services.redis]
image = "redis:alpine" image = "redis:alpine"
container_name = "redis" container_name = "redis-nextcloud"
networks = ["nextcloud"] networks = ["nextcloud"]
restart = "unless-stopped" restart = "unless-stopped"
command = "redis-server --requirepass 123" command = "redis-server --requirepass 123"

View file

@ -0,0 +1,46 @@
version = "3.7"
[services]
[services.searx]
container_name = "searx"
image = "searxng/searxng:latest"
networks = ["searx", "proxy"]
volumes = ["/docker/searx:/etc/searxng:rw"]
environment = ["SEARXNG_BASE_URL=https://searx.korhonen.cc/"]
cap_drop = ["ALL"]
cap_add = ["CHOWN", "SETGID", "SETUID", "DAC_OVERRIDE"]
labels = [
"traefik.enable=true",
"traefik.docker.network=proxy",
"traefik.http.routers.searx-redirect.entrypoints=http",
"traefik.http.routers.searx-redirect.rule=Host(`searx.korhonen.cc`)",
"traefik.http.routers.searx-redirect.middlewares=http2https@file",
"traefik.http.routers.searx.entrypoints=https",
"traefik.http.routers.searx.middlewares=secHeaders@file,compress@file",
"traefik.http.routers.searx.rule=Host(`searx.korhonen.cc`)",
"traefik.http.routers.searx.service=searx",
"traefik.http.services.searx.loadbalancer.server.port=8080",
]
[services.searx.logging]
driver = "json-file"
[services.searx.logging.options]
max-size = "1m"
max-file = "1"
[services.redis]
container_name = "redis-searx"
image = "redis:alpine"
command = "redis-server --save \"\" --appendonly \"no\""
networks = ["searx"]
tmpfs = ["/var/lib/redis"]
cap_drop = ["ALL"]
cap_add = ["SETGID", "SETUID", "DAC_OVERRIDE"]
[networks.searx.ipam]
driver = "default"
[networks.proxy]
external = true