freeipa
This commit is contained in:
@@ -1,5 +1,5 @@
|
|||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/cloudflare/cloudflared:latest
|
Image=gitea.iot.cudanet.org/administrator/quadlets/cloudflared:2026.3.0
|
||||||
Exec=tunnel --no-autoupdate run --token eyJhIjoiNDQ4ZTY3NDk5ZWUyNWY3ZDE4NjJiYjZjYTU1YzFlZjUiLCJ0IjoiMDk1Mzk5N2EtNjFkZS00MDk1LTg4YzUtMzM1M2RhZDJlNzNiIiwicyI6IkRKYmNOSUd5ZHVaWUlPOGVENU91QktWLzQvdG0yV0hxT1hpZExaRUtDVlk9In0=
|
Exec=tunnel --no-autoupdate run --token eyJhIjoiNDQ4ZTY3NDk5ZWUyNWY3ZDE4NjJiYjZjYTU1YzFlZjUiLCJ0IjoiMDk1Mzk5N2EtNjFkZS00MDk1LTg4YzUtMzM1M2RhZDJlNzNiIiwicyI6IkRKYmNOSUd5ZHVaWUlPOGVENU91QktWLzQvdG0yV0hxT1hpZExaRUtDVlk9In0=
|
||||||
LogDriver=journald
|
LogDriver=journald
|
||||||
ReadOnly=true
|
ReadOnly=true
|
||||||
@@ -9,7 +9,7 @@ Memory=2048M
|
|||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Restart=always
|
Restart=always
|
||||||
ExecStartPre=/usr/bin/podman pull docker.io/cloudflare/cloudflared:latest
|
#ExecStartPre=/usr/bin/podman pull docker.io/cloudflare/cloudflared:latest
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=default.target
|
WantedBy=default.target
|
||||||
|
|||||||
+1
-1
@@ -4,7 +4,7 @@ After=network-online.target podman.socket
|
|||||||
Requires=podman.socket
|
Requires=podman.socket
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/fnsys/dockhand:v1.0.22
|
Image=gitea.iot.cudanet.org/administrator/quadlets/dockhand:v1.0.22
|
||||||
ContainerName=dockhand
|
ContainerName=dockhand
|
||||||
User=0
|
User=0
|
||||||
# Pass the security flag directly to Podman to bypass SELinux socket restrictions
|
# Pass the security flag directly to Podman to bypass SELinux socket restrictions
|
||||||
|
|||||||
@@ -0,0 +1,29 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=FreeIPA Server
|
||||||
|
After=network-online.target
|
||||||
|
|
||||||
|
[Container]
|
||||||
|
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
|
||||||
|
ContainerName=freeipa-server
|
||||||
|
Network=podman-bridge0:ip=10.0.0.141
|
||||||
|
|
||||||
|
Environment=IPA_DM_PASSWORD=SIssy123!!
|
||||||
|
Environment=IPA_ADMIN_PASSWORD=SIssy123!!
|
||||||
|
|
||||||
|
PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141
|
||||||
|
|
||||||
|
# ADDED: --no-host-dns and --no-ntp to prevent local enrollment crashes
|
||||||
|
Exec=ipa-server-install -U -r IOT.CUDANET.ORG -p SIssy123!! -a SIssy123!! --no-ntp --no-host-dns
|
||||||
|
|
||||||
|
Volume=/var/podman/freeipa/data:/data:Z
|
||||||
|
AddCapability=CAP_SYS_ADMIN
|
||||||
|
AddCapability=CAP_NET_ADMIN
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Notify=false
|
||||||
|
Restart=on-failure
|
||||||
|
RestartSec=30
|
||||||
|
TimeoutStartSec=1800
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
+2
-2
@@ -3,14 +3,14 @@
|
|||||||
Description=Gitea MySQL Database
|
Description=Gitea MySQL Database
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/library/mysql:8
|
Image=gitea.iot.cudanet.org/administrator/quadlets/mysql:8
|
||||||
Volume=/var/podman/gitea/mysql:/var/lib/mysql:Z
|
Volume=/var/podman/gitea/mysql:/var/lib/mysql:Z
|
||||||
Environment=MYSQL_ROOT_PASSWORD=gitea
|
Environment=MYSQL_ROOT_PASSWORD=gitea
|
||||||
Environment=MYSQL_USER=gitea
|
Environment=MYSQL_USER=gitea
|
||||||
Environment=MYSQL_PASSWORD=gitea
|
Environment=MYSQL_PASSWORD=gitea
|
||||||
Environment=MYSQL_DATABASE=gitea
|
Environment=MYSQL_DATABASE=gitea
|
||||||
Network=gitea.network
|
Network=gitea.network
|
||||||
ContainerName=mysql
|
ContainerName=gitea-db
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Restart=always
|
Restart=always
|
||||||
|
|||||||
@@ -4,12 +4,12 @@ Description=Gitea Server
|
|||||||
After=gitea-db.service
|
After=gitea-db.service
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
ContainerName=gitea
|
ContainerName=gitea-server
|
||||||
Image=docker.gitea.com/gitea:1.26.1
|
Image=gitea.iot.cudanet.org/administrator/quadlets/gitea:1.26.1
|
||||||
Environment=USER_UID=1000
|
Environment=USER_UID=1000
|
||||||
Environment=USER_GID=1000
|
Environment=USER_GID=1000
|
||||||
Environment=GITEA__database__DB_TYPE=mysql
|
Environment=GITEA__database__DB_TYPE=mysql
|
||||||
Environment=GITEA__database__HOST=mysql:3306
|
Environment=GITEA__database__HOST=gitea-db:3306
|
||||||
Environment=GITEA__database__NAME=gitea
|
Environment=GITEA__database__NAME=gitea
|
||||||
Environment=GITEA__database__USER=gitea
|
Environment=GITEA__database__USER=gitea
|
||||||
Environment=GITEA__database__PASSWD=gitea
|
Environment=GITEA__database__PASSWD=gitea
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/homebridge/homebridge:2026-05-06
|
Image=gitea.iot.cudanet.org/administrator/quadlets/homebridge:2026-05-06
|
||||||
ContainerName=homebridge
|
ContainerName=homebridge
|
||||||
Network=host
|
Network=host
|
||||||
Memory=2048M
|
Memory=2048M
|
||||||
|
|||||||
+1
-1
@@ -3,7 +3,7 @@ Description=Nginx Proxy Manager
|
|||||||
After=network-online.target
|
After=network-online.target
|
||||||
|
|
||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/jc21/nginx-proxy-manager:latest
|
Image=gitea.iot.cudanet.org/administrator/quadlets/nginx-proxy-manager:2.14.0
|
||||||
ContainerName=npm
|
ContainerName=npm
|
||||||
# Ports for HTTP, HTTPS, and Admin UI
|
# Ports for HTTP, HTTPS, and Admin UI
|
||||||
PublishPort=80:80
|
PublishPort=80:80
|
||||||
|
|||||||
@@ -0,0 +1,9 @@
|
|||||||
|
# this file must go in /etc/systemd/system/freeipa.service.d/override.conf
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
# This overrides the Quadlet-generated Type=notify
|
||||||
|
Type=simple
|
||||||
|
# Prevents systemd from killing it if the Pi lags
|
||||||
|
TimeoutStartSec=1200
|
||||||
|
Restart=always
|
||||||
|
RestartSec=30
|
||||||
+1
-1
@@ -1,5 +1,5 @@
|
|||||||
[Container]
|
[Container]
|
||||||
Image=docker.io/portainer/portainer-ce:latest
|
Image=gitea.iot.cudanet.org/administrator/quadlets/portainer-ce:2.39.2
|
||||||
ContainerName=portainer
|
ContainerName=portainer
|
||||||
Volume=/run/podman/podman.sock:/var/run/docker.sock:Z
|
Volume=/run/podman/podman.sock:/var/run/docker.sock:Z
|
||||||
Volume=/var/podman/portainer/data:/data:Z
|
Volume=/var/podman/portainer/data:/data:Z
|
||||||
|
|||||||
@@ -0,0 +1,8 @@
|
|||||||
|
docker.io/portainer/portainer-ce:2.39.2
|
||||||
|
docker.io/homebridge/homebridge:2026-05-06
|
||||||
|
docker.io/library/mysql:8
|
||||||
|
docker.gitea.com/gitea:1.26.1
|
||||||
|
docker.io/fnsys/dockhand:v1.0.22
|
||||||
|
docker.io/cloudflare/cloudflared:2026.3.0
|
||||||
|
docker.io/jc21/nginx-proxy-manager:2.14.0
|
||||||
|
docker.io/freeipa/freeipa-server:almalinux-9-4.12.2
|
||||||
Reference in New Issue
Block a user