feat: optimize container configuration
This commit is contained in:
parent
712b071216
commit
d2be1b0b9c
|
@ -18,14 +18,16 @@ in {
|
||||||
extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
|
extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
|
||||||
};
|
};
|
||||||
extraOptions = [
|
extraOptions = [
|
||||||
"--runtime-flag=directfs=false"
|
"--runtime=crun"
|
||||||
"--runtime-flag=network=host"
|
|
||||||
"--uidmap=0:65534:1"
|
"--uidmap=0:65534:1"
|
||||||
"--gidmap=0:65534:1"
|
"--gidmap=0:65534:1"
|
||||||
"--uidmap=100:${toString uid}:1"
|
"--uidmap=100:${toString uid}:1"
|
||||||
"--gidmap=101:${toString gid}:1"
|
"--gidmap=101:${toString gid}:1"
|
||||||
"--network=host"
|
"--network=host"
|
||||||
"--cap-add=MKNOD"
|
"--cap-add=MKNOD"
|
||||||
|
"--cap-add=CHOWN"
|
||||||
|
"--cap-add=FOWNER"
|
||||||
|
"--cap-add=SYS_CHROOT"
|
||||||
"--label=io.containers.autoupdate=registry"
|
"--label=io.containers.autoupdate=registry"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
|
@ -37,7 +37,6 @@ let
|
||||||
config.age.secrets.immich-typesense-env.path
|
config.age.secrets.immich-typesense-env.path
|
||||||
];
|
];
|
||||||
extraOptions = [
|
extraOptions = [
|
||||||
"--runtime-flag=directfs=false"
|
|
||||||
"--runtime-flag=network=host"
|
"--runtime-flag=network=host"
|
||||||
"--uidmap=0:65534:1"
|
"--uidmap=0:65534:1"
|
||||||
"--gidmap=0:65534:1"
|
"--gidmap=0:65534:1"
|
||||||
|
|
Loading…
Reference in a new issue