nixos/machines/bomba/services/yamtrack.nix

  # Temporary solution until https://github.com/NixOS/nixpkgs/pull/501051 gets merged
  # TODO: Once merged change also caddy.nix accordingly
# Auto-generated by compose2nix.

{ pkgs, lib, config, ... }:
{
  # Enable container name DNS for all Podman networks.
  networking.firewall.interfaces = let
    matchAll = if !config.networking.nftables.enable then "podman+" else "podman*";
  in {
    "${matchAll}".allowedUDPPorts = [ 53 ];
  };

  virtualisation.oci-containers.backend = "podman";

  # Containers
  virtualisation.oci-containers.containers."yamtrack" = {
    image = "ghcr.io/fuzzygrim/yamtrack";
    environmentFiles = [ config.sops.secrets.yamtrack_env.path ];
    volumes = [
      "/var/lib/yamtrack:/yamtrack/db:rw"
    ];
    ports = [
      "8014:8000/tcp"
    ];
    dependsOn = [
      "yamtrack_redis"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network-alias=yamtrack"
      "--network=yamtrack_default"
    ];
  };
  systemd.services."podman-yamtrack" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "always";
    };
    after = [
      "podman-network-yamtrack_default.service"
    ];
    requires = [
      "podman-network-yamtrack_default.service"
    ];
    partOf = [
      "podman-compose-yamtrack-root.target"
    ];
    wantedBy = [
      "podman-compose-yamtrack-root.target"
    ];
  };
  virtualisation.oci-containers.containers."yamtrack_redis" = {
    image = "redis:8-alpine";
    volumes = [
      "yamtrack_redis_data:/data:rw"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network-alias=yamtrack_redis"
      "--network=yamtrack_default"
    ];
  };
  systemd.services."podman-yamtrack_redis" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "always";
    };
    after = [
      "podman-network-yamtrack_default.service"
      "podman-volume-yamtrack_redis_data.service"
    ];
    requires = [
      "podman-network-yamtrack_default.service"
      "podman-volume-yamtrack_redis_data.service"
    ];
    partOf = [
      "podman-compose-yamtrack-root.target"
    ];
    wantedBy = [
      "podman-compose-yamtrack-root.target"
    ];
  };

  # Networks
  systemd.services."podman-network-yamtrack_default" = {
    path = [ pkgs.podman ];
    serviceConfig = {
      Type = "oneshot";
      RemainAfterExit = true;
      ExecStop = "podman network rm -f yamtrack_default";
    };
    script = ''
      podman network inspect yamtrack_default || podman network create yamtrack_default
    '';
    partOf = [ "podman-compose-yamtrack-root.target" ];
    wantedBy = [ "podman-compose-yamtrack-root.target" ];
  };

  # Volumes
  systemd.services."podman-volume-yamtrack_redis_data" = {
    path = [ pkgs.podman ];
    serviceConfig = {
      Type = "oneshot";
      RemainAfterExit = true;
    };
    script = ''
      podman volume inspect yamtrack_redis_data || podman volume create yamtrack_redis_data
    '';
    partOf = [ "podman-compose-yamtrack-root.target" ];
    wantedBy = [ "podman-compose-yamtrack-root.target" ];
  };

  # Root service
  # When started, this will automatically create all resources and start
  # the containers. When stopped, this will teardown all resources.
  systemd.targets."podman-compose-yamtrack-root" = {
    unitConfig = {
      Description = "Root target generated by compose2nix.";
    };
    wantedBy = [ "multi-user.target" ];
  };
}