373 lines
13 KiB
Scheme
373 lines
13 KiB
Scheme
;; Indicate which modules to import to access the variables
|
|
;; used in this configuration.
|
|
(use-modules (gnu))
|
|
(use-package-modules databases)
|
|
(use-service-modules cups desktop networking ssh xorg docker dbus databases)
|
|
|
|
(operating-system
|
|
(locale "en_US.utf8")
|
|
(timezone "America/Chicago")
|
|
(keyboard-layout (keyboard-layout "us"))
|
|
(host-name "excellon")
|
|
|
|
;; The list of user accounts ('root' is implicit).
|
|
(users
|
|
(cons* (user-account
|
|
(name "bartronx7")
|
|
(comment "bartronx7")
|
|
(group "users")
|
|
(home-directory "/home/bartronx7")
|
|
(supplementary-groups '("wheel" "netdev" "audio" "video" "docker")))
|
|
%base-user-accounts))
|
|
|
|
;; Below is the list of system services. To search for available
|
|
;; services, run 'guix system search KEYWORD' in a terminal.
|
|
(services
|
|
(append (list
|
|
;; To configure OpenSSH, pass an 'openssh-configuration'
|
|
;; record as a second argument to 'service' below.
|
|
(service openssh-service-type)
|
|
(service dhcp-client-service-type)
|
|
(service ntp-service-type)
|
|
(service elogind-service-type
|
|
(elogind-configuration (handle-suspend-key 'ignore)))
|
|
(service dbus-root-service-type)
|
|
(service containerd-service-type)
|
|
(service docker-service-type (docker-configuration
|
|
(environment-variables (list
|
|
"TMPDIR=/tmp/dockerd"))))
|
|
|
|
(service oci-container-service-type (list
|
|
|
|
;; (oci-container-configuration
|
|
;; (image "localhost:5000/caddy:latest")
|
|
;; (provision "caddy")
|
|
;; (respawn? #t)
|
|
;; (network "sandbox")
|
|
;; (ports '(
|
|
;; ("80" . "80")
|
|
;; ("443" . "443")))
|
|
;; (environment (list
|
|
;; '("NAMECHEAP_API_KEY" . "0e6cd6e2f5044d08a63b9ae05bd1938d")
|
|
;; '("NAMECHEAP_API_USER" . "bakeley")
|
|
;; '("NAMECHEAP_CLIENT_IP" . "172.56.94.158")
|
|
;; '("PUBLIC_IP" . "172.56.94.158")))
|
|
;; (volumes (list
|
|
;; '("/data/docker/volumes/caddy/Caddyfile" . "/etc/caddy/Caddyfile")
|
|
;; '("/data/docker/volumes/caddy/data" . "/data")
|
|
;; '("/data/docker/volumes/caddy/config" . "/config"))))
|
|
|
|
(oci-container-configuration
|
|
(image "docker.io/fosrl/pangolin:1.14.1")
|
|
(provision "pangolin")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(volumes (list
|
|
'("/data/docker/volumes/pangolin/config" . "/app/config"))))
|
|
|
|
(oci-container-configuration
|
|
(image "docker.io/traefik:v3.6")
|
|
(provision "traefik")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(requirement '(pangolin))
|
|
(environment (list
|
|
'("NAMECHEAP_API_KEY" . "0e6cd6e2f5044d08a63b9ae05bd1938d")
|
|
'("NAMECHEAP_API_USER" . "bakeley")))
|
|
(ports '(
|
|
("443" . "443")
|
|
("80" . "80")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/pangolin/config/traefik" . "/etc/traefik")
|
|
'("/data/docker/volumes/pangolin/config/letsencrypt" . "/letsencrypt")
|
|
'("/data/docker/volumes/pangolin/config/logs" . "/var/log/traefik")))
|
|
(command '(
|
|
"--configFile" "/etc/traefik/traefik_config.yml")))
|
|
|
|
(oci-container-configuration
|
|
(image "docker.io/actualbudget/actual-server:latest")
|
|
(provision "actual")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("5006" . "5006")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/actual/data" . "/data"))))
|
|
|
|
(oci-container-configuration
|
|
(image "miniflux/miniflux:latest")
|
|
(provision "miniflux")
|
|
(network "sandbox")
|
|
(requirement '(miniflux-db))
|
|
(ports '(
|
|
("8081" . "8080")))
|
|
(environment (list
|
|
'("DATABASE_URL" . "postgres://miniflux:99uskas0_l@miniflux-db/miniflux?sslmode=disable")
|
|
'("RUN_MIGRATIONS" . "1")
|
|
'("CREATE_ADMIN" . "1")
|
|
'("ADMIN_USERNAME" . "admin")
|
|
'("ADMIN_PASSWORD" . "982#@2gGGHjf"))))
|
|
|
|
(oci-container-configuration
|
|
(image "docker.io/postgres:17-alpine")
|
|
(provision "miniflux-db")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("5432" . "5432")))
|
|
(environment (list
|
|
'("POSTGRES_USER" . "miniflux")
|
|
'("POSTGRES_PASSWORD" . "99uskas0_l")
|
|
'("POSTGRES_DB" . "miniflux")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/miniflux_db" . "/var/lib/postgresql/data"))))
|
|
|
|
(oci-container-configuration
|
|
(image "codeberg.org/forgejo/forgejo:10")
|
|
(provision "forgejo")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("3000" . "3000")
|
|
("2222" . "22")))
|
|
(environment (list
|
|
'("USER_UID" . "1000")
|
|
'("USER_GID" . "1000")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/forgejo" . "/data")
|
|
'("/etc/timezone" . "/etc/timezone:ro")
|
|
'("/etc/localtime" . "/etc/localtime:ro"))))
|
|
|
|
(oci-container-configuration
|
|
(image "packetriot/pktriot:latest")
|
|
(provision "pktriot")
|
|
(respawn? #t)
|
|
(network "sandbox")
|
|
(volumes (list
|
|
'("/data/docker/volumes/pktriot" . "/data:rw"))))
|
|
|
|
(oci-container-configuration
|
|
(image "plexinc/pms-docker")
|
|
(provision "plex")
|
|
(network "sandbox")
|
|
(extra-arguments '("--device=/dev/dvb"))
|
|
(ports '(
|
|
("32400" . "32400")
|
|
("8324" . "8324")
|
|
("32469" . "32469")
|
|
("1900" . "1900")
|
|
("32410" . "32410")
|
|
("32412" . "32412")
|
|
("32413" . "32413")
|
|
("32414" . "32414")))
|
|
(environment (list
|
|
'("TZ" . "America/Chicago")
|
|
'("PLEX_CLAIM:" . "claim-7-N1LVT5AMco6ayhy4Tm")
|
|
'("ADVERTISE_IP:" . "http://192.168.1.3:32400/")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/plex/config" . "/config")
|
|
'("/data/docker/volumes/plex/transcode" . "/transcode")
|
|
'("/data" . "/data:rw"))))
|
|
|
|
(oci-container-configuration
|
|
(image "jellyfin/jellyfin:latest")
|
|
(provision "jellyfin")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("8096" . "8096")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/jellyfin/config" . "/config")
|
|
'("/data/docker/volumes/jellyfin/cache" . "/cache")
|
|
'("/data/shows" . "/shows")
|
|
'("/data/movies" . "/movies")
|
|
'("/data/music" . "/music"))))
|
|
|
|
(oci-container-configuration
|
|
(image "lscr.io/linuxserver/sonarr:latest")
|
|
(provision "sonarr")
|
|
(requirement '(prowlarr))
|
|
(network "sandbox")
|
|
(ports '(
|
|
("8989" . "8989")))
|
|
(environment (list
|
|
'("PUID" . "1000")
|
|
'("PGID" . "1000")
|
|
'("TZ" . "US/America/Chicago")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/sonarr/config" . "/config")
|
|
'("/data/shows" . "/data/shows")
|
|
'("/data/downloads" . "/data/downloads"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/hotio/radarr:latest")
|
|
(provision "radarr")
|
|
(requirement '(prowlarr))
|
|
(network "sandbox")
|
|
(ports '(
|
|
("7878" . "7878")))
|
|
(environment (list
|
|
'("PUID" . "1000")
|
|
'("PGID" . "1000")
|
|
'("UMASK" . "002")
|
|
'("TZ" . "US/America/Chicago")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/radarr/config" . "/config")
|
|
'("/data/downloads" . "/data/downloads")
|
|
'("/data/movies" . "/data/movies"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/hotio/prowlarr:latest")
|
|
(provision "prowlarr")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("9696" . "9696")))
|
|
(environment (list
|
|
'("PUID" . "1000")
|
|
'("PGID" . "1000")
|
|
'("TZ" . "US/America/Chicago")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/prowlarr/config" . "/config"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/hotio/nzbget:latest")
|
|
(provision "nzbget")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("6789" . "6789")))
|
|
(environment (list
|
|
'("PUID" . "1000")
|
|
'("PGID" . "1000")
|
|
'("UMASK" . "002")
|
|
'("TZ" . "US/America/Chicago")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/nzbget/config" . "/config")
|
|
'("/data/downloads" . "/data/downloads")
|
|
'("/data/movies" . "/data/movies")
|
|
'("/data/shows" . "/data/shows"))))
|
|
|
|
(oci-container-configuration
|
|
(image "drakkan/sftpgo:latest")
|
|
(provision "sftpgo")
|
|
(network "sandbox")
|
|
(ports '(
|
|
("8082" . "8080")
|
|
("2022" . "2022")))
|
|
(volumes (list
|
|
'("/data/movies" . "/movies")
|
|
'("/data/shows" . "/shows")
|
|
'("/data/music" . "/music")
|
|
'("/data/pictures" . "/pictures"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/immich-app/immich-server:release")
|
|
(provision "immich-server")
|
|
(network "sandbox")
|
|
(requirement '(immich-redis immich-postgres))
|
|
(volumes (list
|
|
'("/data/docker/volumes/immich/server" . "/data")
|
|
'("/data/docker/volumes/immich/pgdata" . "/db")
|
|
'("/data/pictures" . "/pictures")
|
|
'("/etc/localtime" . "/etc/localtime")
|
|
))
|
|
(environment (list
|
|
'("DB_DATA_LOCATION" . "/db")
|
|
'("DB_HOSTNAME" . "immich-postgres")
|
|
'("DB_DATABASE_NAME" . "immich")
|
|
'("DB_USERNAME" . "immich")
|
|
'("DB_PASSWORD" . "i7_qpV3$0o")
|
|
'("REDIS_HOSTNAME" . "immich-redis")))
|
|
(ports '(
|
|
("2283" . "2283"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/immich-app/immich-machine-learning:release")
|
|
(provision "immich-ml")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(volumes (list
|
|
'("/data/docker/volumes/immich/ml/cache" . "/cache"))))
|
|
|
|
(oci-container-configuration
|
|
(image "docker.io/valkey/valkey:8-bookworm")
|
|
(provision "immich-redis")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(volumes (list
|
|
'("/data/docker/volumes/immich/valkey" . "/data"))))
|
|
|
|
(oci-container-configuration
|
|
(image "ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0")
|
|
(provision "immich-postgres")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(environment (list
|
|
'("POSTGRES_PASSWORD" . "i7_qpV3$0o")
|
|
'("POSTGRES_USER" . "immich")
|
|
'("POSTGRES_DB" . "immich")
|
|
'("POSTGRES_INITDB_ARGS" . "--data-checksums")
|
|
'("DB_STORAGE_TYPE" . "HDD")))
|
|
(volumes (list
|
|
'("/data/docker/volumes/immich/pgdata" . "/var/lib/postgresql/data"))))
|
|
|
|
(oci-container-configuration
|
|
(image "registry.gitlab.com/fmd-foss/fmd-server:latest")
|
|
(provision "fmd")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(volumes (list
|
|
'("/data/docker/volumes/fmd/db" . "/var/lib/postgresql/data")
|
|
'("/data/docker/volumes/fmd/config" . "/etc/fmd-server")))
|
|
(ports '(("8080" . "8080"))))
|
|
|
|
(oci-container-configuration
|
|
(image "fosrl/newt")
|
|
(provision "newt")
|
|
(network "sandbox")
|
|
(respawn? #t)
|
|
(command '(
|
|
"/usr/local/bin/newt"
|
|
"--id" "svbss62wwiukdmy"
|
|
"--secret" "24kjsz8jubg0ov7v9t3r26eg5eeshy1d39zi0boxniqeqplt"
|
|
"--endpoint" "https://pangolin.akeley.cloud")))
|
|
|
|
|
|
))) %base-services))
|
|
|
|
(bootloader (bootloader-configuration
|
|
(bootloader grub-efi-bootloader)
|
|
(targets (list "/boot/efi"))
|
|
(keyboard-layout keyboard-layout)))
|
|
|
|
;; The devices that make up the luks "docs" labelled filesystem
|
|
(mapped-devices
|
|
(list (mapped-device
|
|
(source (uuid "cf6bafca-b225-46ca-8dfc-b82fb6ab5560"))
|
|
(target "doc1")
|
|
(type luks-device-mapping))
|
|
(mapped-device
|
|
(source (uuid "05f833fb-1c68-4453-9df5-68a454f59845"))
|
|
(target "doc2")
|
|
(type luks-device-mapping))))
|
|
|
|
;; The list of file systems that get "mounted". The unique
|
|
;; file system identifiers there ("UUIDs") can be obtained
|
|
;; by running 'blkid' in a terminal.
|
|
(file-systems
|
|
(cons* (file-system
|
|
(mount-point "/")
|
|
(device (file-system-label "root"))
|
|
(type "ext4"))
|
|
|
|
(file-system
|
|
(mount-point "/boot/efi")
|
|
(device (uuid "63B5-42FC" 'fat32))
|
|
(type "vfat"))
|
|
|
|
(file-system
|
|
(mount-point "/data")
|
|
(device (file-system-label "datapool"))
|
|
(type "btrfs"))
|
|
|
|
(file-system
|
|
(mount-point "/docs")
|
|
(device "/dev/mapper/doc1")
|
|
(type "btrfs"))
|
|
|
|
%base-file-systems)))
|