root
25 lines
701 B
INI
25 lines
701 B
INI
[Unit]
|
|
Description=FreeIPA Server
|
|
After=network-online.target
|
|
|
|
[Container]
|
|
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
|
|
ContainerName=freeipa-server
|
|
Network=podman-bridge0:ip=10.0.0.141
|
|
|
|
# Remove all IPA_DM_PASSWORD, IPA_ADMIN_PASSWORD, and Exec lines.
|
|
# We want the container to see the volume and say "Ah, I'm already done."
|
|
PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141
|
|
|
|
Volume=/var/podman/freeipa/data:/data:Z
|
|
AddCapability=CAP_SYS_ADMIN
|
|
AddCapability=CAP_NET_ADMIN
|
|
|
|
[Service]
|
|
Notify=false
|
|
Restart=always
|
|
RestartSec=30
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|