diff --git a/hosts/isengard.nix b/hosts/isengard.nix index 3b61ef8..d17b484 100644 --- a/hosts/isengard.nix +++ b/hosts/isengard.nix @@ -21,6 +21,7 @@ ../modules/containers/jitsi.nix ../modules/containers/radarr.nix ../modules/containers/immich.nix + ../modules/containers/argus.nix ]; # Disks diff --git a/modules/agenix.nix b/modules/agenix.nix index 597bb63..d016b9e 100644 --- a/modules/agenix.nix +++ b/modules/agenix.nix @@ -41,5 +41,11 @@ group = "root"; mode = "0400"; }; + argus-conf = { + file = ../secrets/argus-conf.age; + owner = "root"; + group = "root"; + mode = "0400"; + }; }; } diff --git a/modules/containers/argus.nix b/modules/containers/argus.nix new file mode 100644 index 0000000..f6c0018 --- /dev/null +++ b/modules/containers/argus.nix @@ -0,0 +1,32 @@ +# modules/containers/argus.nix +{ config, ... }: + +let + workDir = "/srv/containers/argus"; +in +{ + systemd.tmpfiles.rules = [ + "d ${workDir} 2700 root admin" + ]; + + virtualisation.oci-containers.containers.argus = { + autoStart = true; + + image = "releaseargus/argus:latest"; + + ports = [ + "0.0.0.0:10009:8080" + ]; + + volumes = [ + "${workDir}:/app/data" + "${config.age.secrets.argus-conf.path}:/app/config.yml:ro" + ]; + + environment = { + TZ = "Europe/Bucharest"; + ARGUS_UID = "1000"; + ARGUS_GID = "10000"; + }; + }; +} diff --git a/secrets/argus-conf.age b/secrets/argus-conf.age new file mode 100644 index 0000000..47701de --- /dev/null +++ b/secrets/argus-conf.age @@ -0,0 +1,30 @@ +-----BEGIN AGE ENCRYPTED FILE----- +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSA0SVpY +Mit1aGFZK2xOcFd4Tmw2N05kbVYvdU14NlkreExMZ3laM2JyN2pVCnlTWGdQZWdm +dzlwWU9hbTJDWVE3aXNORUhOU3ZmUFBqYjYwSmJObUpJTlkKLT4gc3NoLWVkMjU1 +MTkgS0tuNDVBIHpMZlljR3hlSGd0NXVzcFdMRTFTYTNYYTFiaThBRUF2dzNvaWxi +RFZlaHcKU3FXMmdpRzJDUDlwcTlWVlBnSWc5M1VvYVVOdlRKbFU1c0ZielN3b1I4 +bwotPiB0K1IqOS0uLWdyZWFzZSBxIE1BcSBVbDsgWnA+IyVaLwpVN3R1MUhpMlVH +VDdEeUMyVy9PbjBMSUNaMjNKK3NSWGFRbnBqNXR0OVlnTE5kR3ZVN2swR2REZ2RY +R3BlS0ViClc1VEs0ZzVhVWloTlYrMFlVQnNBVHhvemdvTHdMOG5kelFqR3I3d3Bt +Nm9PaDFZOQotLS0gT0d4akp1a3REMWRKSlV3N0kxRG40dEg3TXQwR0ZDUjg3NDZm +K2dmVkhPNAoLo/5SBrOEPZASNHvtbE/+6R2bJ5X1jg4ixyvLNms8KlnwixbMaPI+ +XqkrcpHgPaxW8WpKPASQtcL0qazjAZ2X99q7arjh0uWZFzSF0gKL2DWUUNgwExcH +ttBmG5yrQv+LEhycArfT9Mt5VYQhg8fVVXl72tC7B74d/N33c6l4cBHh1ZRkyNW5 +UHoQmuyKizVsxt0Eyjek5jTy/dgG0HloLgtBDFZ0OM/5wu984wC7j08L052Ren8k +Vf9qcRq8VIR2IDQ07/ePVGZQx9XjB5lNLO7327u9lNQvsJ9XGKH8T2UTkr2KX7mT +SQrkV8sJIqY7V/FBNaaXMeyvnSGgY5BJXTFxttYS8EaJ/Af/1dacc/JaYdasud4U +x/R4Y/Vu29BsGqcyjVl9zkS2QBbHQPSwLwzxlGtx7iH8RkOsDwlHimu86UBKCy1R +cqTSAUVnmaiKcP9oN+XF0vOZ8sV+cr/mFYudKcmX8s8EL6QfDDZZyJPwrI5PwGNh +J8qN+S45KBnOrkQI3/CsxPekUMI/6kNQFLo66QemjVxMU2/Vl9Q/qctW4oGIJThP +gxLBRrY+hQDDNPKPfLed+2mvOET8zfiOBkp9AX6BJikwtlNqGiUZzEpsVoisiByM +hEUup5xeSJcu3foINDzbXWm1Ms7i9tx6LMbLnxkSCbVSYQcces1kXuIVQwFrf6Gx +QDyvuvkpi1Ni7nj3zQQ1nDGsNVzGFcXc6WR2LaqTr0+cJDhL0TGxOPMttgpEBv5k +JcXGd8SQlwyEE6U4+pdIjQsgBlr/cJu2Y7/7/RV0ZjhSQlmkvb/vH19NrfoBpqpw +qXKDpURoI/LQyneyA9gVIp4ybkBQ/cYmhapRy1VecQ2AG4ve9YGkFKF21d1yodH0 +lY8vl9Pwf4VsYB9HTP9IqepAHudlt1M3Fa+xzXiZnkmPaMtl4hXrBsd1mdFXBQQj +N8F3EaP7ILkU2b3doLAwWQ7lTRB5c2nNKcFeWI38mgcMrXG1r8AsbEW7pEi5Vq5s +Sw0lePjUmhrwFu2DErANpjRhnkNSQgwgv7cjXEoid+uPTM7/5lSsCu11uGGbPua4 +Y+W2k7B09ZtJ/iXKwpGprZAFCtbhuwjhjaVIB1DL44IcgQYubiADTq+XWDM6HZd2 +01/DgeIcZLk95jLA18mgs4cuhNsYH0ta6JcKO2hofRU6dGW4pabQKpR6Ue216G1a +-----END AGE ENCRYPTED FILE----- diff --git a/secrets/secrets.nix b/secrets/secrets.nix index b419260..6b7e1c4 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -11,4 +11,5 @@ in "nextcloud-db.age".publicKeys = [ victor isengard ]; "jitsi-env.age".publicKeys = [ victor isengard ]; "immich.age".publicKeys = [ victor isengard ]; + "argus-conf.age".publicKeys = [ victor isengard ]; }