containers: added actualbudget

hosts/isengard.nix

@@ -41,5 +41,8 @@
         "d /srv/containers 0775 root admin"
     ];
 
+    # Security
+    security.auditd.enable = true;
+
     system.stateVersion = release;
 }

modules/containers/actualbudget.nix

@@ -0,0 +1,23 @@
+{ config, ... }:
+
+let
+    workDir = "/srv/containers/actualbudget";
+in
+{
+    systemd.tmpfiles.rules = [
+        "d ${workDir} 2700 root admin"
+    ];
+
+    virtualisation.oci-containers.containers.actualbudget = {
+        autoStart = true;
+        image = "actualbudget/actual-server:latest-alpine";
+
+        ports = [
+            "0.0.0.0:10004:5006"
+        ];
+
+        volumes = [
+            "${workDir}:/data"
+        ];
+    };
+}