chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Manage data-access container declaratively

Browse source
This commit is contained in:
Charlotte Van Petegem 2020-12-23 11:52:22 +01:00
parent 45761cb113
commit 565ee07812
No known key found for this signature in database
GPG key ID: 019E764B7184435A
8 changed files with 72 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

30
containers/data-access/default.nix Normal file
View file

@ -0,0 +1,30 @@
{ config, ... }:
{
imports = [ ./secret.nix ];
config = {
chvp.hasContainers = true;
containers.data-access = {
ephemeral = true;
autoStart = true;
bindMounts = {
"/home/data/data" = {
hostPath = "/srv/data";
isReadOnly = false;
};
"/var/secrets" = {
hostPath = "${config.chvp.dataPrefix}/var/secrets/data-access";
isReadOnly = true;
};
};
privateNetwork = true;
hostAddress = "192.168.100.10";
hostAddress6 = "fc00::1";
localAddress = "192.168.100.11";
localAddress6 = "fc00::2";
config = import ./config.nix;
};
};
}