containers: added argus

hosts/isengard.nix

@@ -21,6 +21,7 @@
         ../modules/containers/jitsi.nix
         ../modules/containers/radarr.nix
         ../modules/containers/immich.nix
+        ../modules/containers/argus.nix
 
     ];
     # Disks

modules/agenix.nix

@@ -41,5 +41,11 @@
             group = "root";
             mode = "0400";
         };
+        argus-conf = {
+            file = ../secrets/argus-conf.age;
+            owner = "root";
+            group = "root";
+            mode = "0400";
+        };
     };
 }

modules/containers/argus.nix

@@ -0,0 +1,32 @@
+# modules/containers/argus.nix
+{ config, ... }:
+
+let
+  workDir = "/srv/containers/argus";
+in
+{
+  systemd.tmpfiles.rules = [
+    "d ${workDir} 2700 root admin"
+  ];
+
+  virtualisation.oci-containers.containers.argus = {
+    autoStart = true;
+
+    image = "releaseargus/argus:latest";
+
+    ports = [
+      "0.0.0.0:10009:8080"
+    ];
+
+    volumes = [
+      "${workDir}:/app/data"
+      "${config.age.secrets.argus-conf.path}:/app/config.yml:ro"
+    ];
+
+    environment = {
+      TZ = "Europe/Bucharest";
+      ARGUS_UID = "1000";
+      ARGUS_GID = "10000";
+    };
+  };
+}

secrets/argus-conf.age

@@ -0,0 +1,30 @@
+-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -11,4 +11,5 @@ in
   "nextcloud-db.age".publicKeys = [ victor isengard ];
   "jitsi-env.age".publicKeys = [ victor isengard ];
   "immich.age".publicKeys = [ victor isengard ];
+  "argus-conf.age".publicKeys = [ victor isengard ];
 }