83 lines
No EOL
2.3 KiB
Nix
83 lines
No EOL
2.3 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.containerUpdater;
|
|
in
|
|
{
|
|
options.services.containerUpdater = {
|
|
enable = mkEnableOption "automatic container updates";
|
|
|
|
schedule = mkOption {
|
|
type = types.str;
|
|
default = "*-*-* 03:00:00";
|
|
example = "daily";
|
|
description = ''
|
|
Systemd timer schedule for container updates.
|
|
Can be a systemd time specification or alias like "daily", "weekly".
|
|
'';
|
|
};
|
|
|
|
excludeContainers = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
example = [ "traefik" "wireguard" ];
|
|
description = ''
|
|
List of container names to exclude from automatic updates.
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
# Ensure the update script exists and is executable
|
|
system.activationScripts.container-updater = ''
|
|
chmod +x /home/yanlin/.config/nix/scripts/container-update.sh
|
|
'';
|
|
|
|
# Shell alias for manual execution
|
|
environment.shellAliases = {
|
|
container-update-now = "sudo systemctl start container-updater.service";
|
|
};
|
|
|
|
# Systemd service for container updates
|
|
systemd.services.container-updater = {
|
|
description = "Update podman containers to latest images";
|
|
after = [ "network-online.target" ];
|
|
wants = [ "network-online.target" ];
|
|
|
|
environment = {
|
|
EXCLUDE_CONTAINERS = concatStringsSep "," cfg.excludeContainers;
|
|
};
|
|
|
|
path = [ pkgs.podman pkgs.curl pkgs.coreutils pkgs.nettools ];
|
|
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
ExecStart = "${pkgs.bash}/bin/bash /home/yanlin/.config/nix/scripts/container-update.sh";
|
|
User = "root";
|
|
StandardOutput = "journal";
|
|
StandardError = "journal";
|
|
|
|
# Restart policy
|
|
Restart = "on-failure";
|
|
RestartSec = "5min";
|
|
|
|
# Timeout for the update process (30 minutes should be enough)
|
|
TimeoutStartSec = "30min";
|
|
};
|
|
};
|
|
|
|
# Systemd timer for scheduled updates
|
|
systemd.timers.container-updater = {
|
|
description = "Timer for automatic container updates";
|
|
wantedBy = [ "timers.target" ];
|
|
|
|
timerConfig = {
|
|
OnCalendar = cfg.schedule;
|
|
Persistent = true;
|
|
RandomizedDelaySec = "5min";
|
|
};
|
|
};
|
|
};
|
|
} |