SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 17:31:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Configure tailscale docker sidecars for all containers at once

Browse source
This commit is contained in:
SebastianStork 2024-09-17 23:37:13 +02:00
parent 4db060800b
commit 490056a0d7
3 changed files with 52 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

36
hosts/stratus/containers/docker/default.nix
View file

@ -1,8 +1,34 @@
{ lib, ... }:
{ config, lib, ... }:
let
containers = lib.filterAttrs (_: v: v == "directory") (builtins.readDir ./.);
in
{
imports = lib.mapAttrsToList (name: _: ./${name}) (
lib.filterAttrs (_: value: value == "directory") (builtins.readDir ./.)
);
imports = lib.mapAttrsToList (name: _: ./${name}) containers;
virtualisation.oci-containers.backend = "docker";
sops.secrets = lib.mapAttrs' (
name: _: lib.nameValuePair "container/${name}/tailscale-auth-key" { }
) containers;
virtualisation.oci-containers = {
backend = "docker";
containers = lib.mapAttrs' (
name: _:
lib.nameValuePair "tailscale-${name}" {
image = "ghcr.io/tailscale/tailscale:latest";
environment = {
TS_STATE_DIR = "/var/lib/tailscale";
TS_SERVE_CONFIG = "/config/tailscale-serve.json";
TS_USERSPACE = "true"; # https://github.com/tailscale/tailscale/issues/11372
};
environmentFiles = [
# Contains "TS_AUTHKEY=<token>"
config.sops.secrets."container/${name}/tailscale-auth-key".path
];
volumes = [ "/var/lib/tailscale-${name}:/var/lib/tailscale" ];
extraOptions = [ "--network=container:${name}" ];
dependsOn = [ name ];
}
) containers;
};
}