This commit is contained in:
root
2026-05-10 07:18:20 -07:00
parent a978cc341e
commit f7c53702d8
10 changed files with 57 additions and 11 deletions
+2 -2
View File
@@ -1,5 +1,5 @@
[Container] [Container]
Image=docker.io/cloudflare/cloudflared:latest Image=gitea.iot.cudanet.org/administrator/quadlets/cloudflared:2026.3.0
Exec=tunnel --no-autoupdate run --token eyJhIjoiNDQ4ZTY3NDk5ZWUyNWY3ZDE4NjJiYjZjYTU1YzFlZjUiLCJ0IjoiMDk1Mzk5N2EtNjFkZS00MDk1LTg4YzUtMzM1M2RhZDJlNzNiIiwicyI6IkRKYmNOSUd5ZHVaWUlPOGVENU91QktWLzQvdG0yV0hxT1hpZExaRUtDVlk9In0= Exec=tunnel --no-autoupdate run --token eyJhIjoiNDQ4ZTY3NDk5ZWUyNWY3ZDE4NjJiYjZjYTU1YzFlZjUiLCJ0IjoiMDk1Mzk5N2EtNjFkZS00MDk1LTg4YzUtMzM1M2RhZDJlNzNiIiwicyI6IkRKYmNOSUd5ZHVaWUlPOGVENU91QktWLzQvdG0yV0hxT1hpZExaRUtDVlk9In0=
LogDriver=journald LogDriver=journald
ReadOnly=true ReadOnly=true
@@ -9,7 +9,7 @@ Memory=2048M
[Service] [Service]
Restart=always Restart=always
ExecStartPre=/usr/bin/podman pull docker.io/cloudflare/cloudflared:latest #ExecStartPre=/usr/bin/podman pull docker.io/cloudflare/cloudflared:latest
[Install] [Install]
WantedBy=default.target WantedBy=default.target
+1 -1
View File
@@ -4,7 +4,7 @@ After=network-online.target podman.socket
Requires=podman.socket Requires=podman.socket
[Container] [Container]
Image=docker.io/fnsys/dockhand:v1.0.22 Image=gitea.iot.cudanet.org/administrator/quadlets/dockhand:v1.0.22
ContainerName=dockhand ContainerName=dockhand
User=0 User=0
# Pass the security flag directly to Podman to bypass SELinux socket restrictions # Pass the security flag directly to Podman to bypass SELinux socket restrictions
+29
View File
@@ -0,0 +1,29 @@
[Unit]
Description=FreeIPA Server
After=network-online.target
[Container]
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
ContainerName=freeipa-server
Network=podman-bridge0:ip=10.0.0.141
Environment=IPA_DM_PASSWORD=SIssy123!!
Environment=IPA_ADMIN_PASSWORD=SIssy123!!
PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141
# ADDED: --no-host-dns and --no-ntp to prevent local enrollment crashes
Exec=ipa-server-install -U -r IOT.CUDANET.ORG -p SIssy123!! -a SIssy123!! --no-ntp --no-host-dns
Volume=/var/podman/freeipa/data:/data:Z
AddCapability=CAP_SYS_ADMIN
AddCapability=CAP_NET_ADMIN
[Service]
Notify=false
Restart=on-failure
RestartSec=30
TimeoutStartSec=1800
[Install]
WantedBy=multi-user.target
+2 -2
View File
@@ -3,14 +3,14 @@
Description=Gitea MySQL Database Description=Gitea MySQL Database
[Container] [Container]
Image=docker.io/library/mysql:8 Image=gitea.iot.cudanet.org/administrator/quadlets/mysql:8
Volume=/var/podman/gitea/mysql:/var/lib/mysql:Z Volume=/var/podman/gitea/mysql:/var/lib/mysql:Z
Environment=MYSQL_ROOT_PASSWORD=gitea Environment=MYSQL_ROOT_PASSWORD=gitea
Environment=MYSQL_USER=gitea Environment=MYSQL_USER=gitea
Environment=MYSQL_PASSWORD=gitea Environment=MYSQL_PASSWORD=gitea
Environment=MYSQL_DATABASE=gitea Environment=MYSQL_DATABASE=gitea
Network=gitea.network Network=gitea.network
ContainerName=mysql ContainerName=gitea-db
[Service] [Service]
Restart=always Restart=always
+3 -3
View File
@@ -4,12 +4,12 @@ Description=Gitea Server
After=gitea-db.service After=gitea-db.service
[Container] [Container]
ContainerName=gitea ContainerName=gitea-server
Image=docker.gitea.com/gitea:1.26.1 Image=gitea.iot.cudanet.org/administrator/quadlets/gitea:1.26.1
Environment=USER_UID=1000 Environment=USER_UID=1000
Environment=USER_GID=1000 Environment=USER_GID=1000
Environment=GITEA__database__DB_TYPE=mysql Environment=GITEA__database__DB_TYPE=mysql
Environment=GITEA__database__HOST=mysql:3306 Environment=GITEA__database__HOST=gitea-db:3306
Environment=GITEA__database__NAME=gitea Environment=GITEA__database__NAME=gitea
Environment=GITEA__database__USER=gitea Environment=GITEA__database__USER=gitea
Environment=GITEA__database__PASSWD=gitea Environment=GITEA__database__PASSWD=gitea
+1 -1
View File
@@ -1,5 +1,5 @@
[Container] [Container]
Image=docker.io/homebridge/homebridge:2026-05-06 Image=gitea.iot.cudanet.org/administrator/quadlets/homebridge:2026-05-06
ContainerName=homebridge ContainerName=homebridge
Network=host Network=host
Memory=2048M Memory=2048M
+1 -1
View File
@@ -3,7 +3,7 @@ Description=Nginx Proxy Manager
After=network-online.target After=network-online.target
[Container] [Container]
Image=docker.io/jc21/nginx-proxy-manager:latest Image=gitea.iot.cudanet.org/administrator/quadlets/nginx-proxy-manager:2.14.0
ContainerName=npm ContainerName=npm
# Ports for HTTP, HTTPS, and Admin UI # Ports for HTTP, HTTPS, and Admin UI
PublishPort=80:80 PublishPort=80:80
+9
View File
@@ -0,0 +1,9 @@
# this file must go in /etc/systemd/system/freeipa.service.d/override.conf
[Service]
# This overrides the Quadlet-generated Type=notify
Type=simple
# Prevents systemd from killing it if the Pi lags
TimeoutStartSec=1200
Restart=always
RestartSec=30
+1 -1
View File
@@ -1,5 +1,5 @@
[Container] [Container]
Image=docker.io/portainer/portainer-ce:latest Image=gitea.iot.cudanet.org/administrator/quadlets/portainer-ce:2.39.2
ContainerName=portainer ContainerName=portainer
Volume=/run/podman/podman.sock:/var/run/docker.sock:Z Volume=/run/podman/podman.sock:/var/run/docker.sock:Z
Volume=/var/podman/portainer/data:/data:Z Volume=/var/podman/portainer/data:/data:Z
+8
View File
@@ -0,0 +1,8 @@
docker.io/portainer/portainer-ce:2.39.2
docker.io/homebridge/homebridge:2026-05-06
docker.io/library/mysql:8
docker.gitea.com/gitea:1.26.1
docker.io/fnsys/dockhand:v1.0.22
docker.io/cloudflare/cloudflared:2026.3.0
docker.io/jc21/nginx-proxy-manager:2.14.0
docker.io/freeipa/freeipa-server:almalinux-9-4.12.2