feat(bomba): add yamtrack

machines/bomba/secrets.nix

@@ -23,6 +23,7 @@
         indexers_ilcorsaroblu_password = default;
         gitea_registration_token = default;
         navidrome_env = default;
+        yamtrack_env = default;
       };
       templates = {
         "gitea_runner.env".content = ''

machines/bomba/services/caddy.nix

@@ -74,6 +74,9 @@
         "navidrome.patrickcanal.it".extraConfig = ''
           reverse_proxy :${toString config.services.navidrome.settings.Port}
         '';
+        "yamtrack.patrickcanal.it".extraConfig = ''
+          reverse_proxy :8014
+        '';
       };
     };
 

machines/bomba/services/default.nix

@@ -2,14 +2,15 @@
 {
   imports = [
     ./caddy.nix
-    ./navidrome.nix
     ./gitea.nix
+    ./navidrome.nix
     ./nextcloud.nix
     ./nixflix.nix
     ./octoprint.nix
     ./teamspeak.nix
     ./vaultwarden.nix
     ./vikunja.nix
+    ./yamtrack.nix
   ];
 
   services.openssh.enable = true;

machines/bomba/services/yamtrack.nix

@@ -0,0 +1,121 @@
+  # Temporary solution until https://github.com/NixOS/nixpkgs/pull/501051 gets merged
+  # TODO: Once merged change also caddy.nix accordingly
+# Auto-generated by compose2nix.
+
+{ pkgs, lib, config, ... }:
+{
+  # Enable container name DNS for all Podman networks.
+  networking.firewall.interfaces = let
+    matchAll = if !config.networking.nftables.enable then "podman+" else "podman*";
+  in {
+    "${matchAll}".allowedUDPPorts = [ 53 ];
+  };
+
+  virtualisation.oci-containers.backend = "podman";
+
+  # Containers
+  virtualisation.oci-containers.containers."yamtrack" = {
+    image = "ghcr.io/fuzzygrim/yamtrack";
+    environmentFiles = [ config.sops.secrets.yamtrack_env.path ];
+    volumes = [
+      "/var/lib/yamtrack:/yamtrack/db:rw"
+    ];
+    ports = [
+      "8014:8000/tcp"
+    ];
+    dependsOn = [
+      "yamtrack_redis"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--network-alias=yamtrack"
+      "--network=yamtrack_default"
+    ];
+  };
+  systemd.services."podman-yamtrack" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+    };
+    after = [
+      "podman-network-yamtrack_default.service"
+    ];
+    requires = [
+      "podman-network-yamtrack_default.service"
+    ];
+    partOf = [
+      "podman-compose-yamtrack-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-yamtrack-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."yamtrack_redis" = {
+    image = "redis:8-alpine";
+    volumes = [
+      "yamtrack_redis_data:/data:rw"
+    ];
+    log-driver = "journald";
+    extraOptions = [
+      "--network-alias=yamtrack_redis"
+      "--network=yamtrack_default"
+    ];
+  };
+  systemd.services."podman-yamtrack_redis" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 90 "always";
+    };
+    after = [
+      "podman-network-yamtrack_default.service"
+      "podman-volume-yamtrack_redis_data.service"
+    ];
+    requires = [
+      "podman-network-yamtrack_default.service"
+      "podman-volume-yamtrack_redis_data.service"
+    ];
+    partOf = [
+      "podman-compose-yamtrack-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-yamtrack-root.target"
+    ];
+  };
+
+  # Networks
+  systemd.services."podman-network-yamtrack_default" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStop = "podman network rm -f yamtrack_default";
+    };
+    script = ''
+      podman network inspect yamtrack_default || podman network create yamtrack_default
+    '';
+    partOf = [ "podman-compose-yamtrack-root.target" ];
+    wantedBy = [ "podman-compose-yamtrack-root.target" ];
+  };
+
+  # Volumes
+  systemd.services."podman-volume-yamtrack_redis_data" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      podman volume inspect yamtrack_redis_data || podman volume create yamtrack_redis_data
+    '';
+    partOf = [ "podman-compose-yamtrack-root.target" ];
+    wantedBy = [ "podman-compose-yamtrack-root.target" ];
+  };
+
+  # Root service
+  # When started, this will automatically create all resources and start
+  # the containers. When stopped, this will teardown all resources.
+  systemd.targets."podman-compose-yamtrack-root" = {
+    unitConfig = {
+      Description = "Root target generated by compose2nix.";
+    };
+    wantedBy = [ "multi-user.target" ];
+  };
+}

machines/bomba/virtualisation.nix

@@ -1,11 +1,15 @@
 { pkgs, ... }:
 {
   virtualisation = {
-    docker.enable = true;
     spiceUSBRedirection.enable = true;
     libvirtd = {
       enable = true;
       package = pkgs.qemu_kvm;
     };
+    podman = {
+      enable = true;
+      autoPrune.enable = true;
+      dockerCompat = true;
+    };
   };
 }