feat: optimize container configuration

This commit is contained in:
Felix Schröter 2024-03-07 21:24:13 +01:00
parent 712b071216
commit d2be1b0b9c
Signed by: felschr
GPG key ID: 671E39E6744C807D
2 changed files with 4 additions and 3 deletions

View file

@ -18,14 +18,16 @@ in {
extra_params = "--o:ssl.enable=false --o:ssl.termination=true"; extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
}; };
extraOptions = [ extraOptions = [
"--runtime-flag=directfs=false" "--runtime=crun"
"--runtime-flag=network=host"
"--uidmap=0:65534:1" "--uidmap=0:65534:1"
"--gidmap=0:65534:1" "--gidmap=0:65534:1"
"--uidmap=100:${toString uid}:1" "--uidmap=100:${toString uid}:1"
"--gidmap=101:${toString gid}:1" "--gidmap=101:${toString gid}:1"
"--network=host" "--network=host"
"--cap-add=MKNOD" "--cap-add=MKNOD"
"--cap-add=CHOWN"
"--cap-add=FOWNER"
"--cap-add=SYS_CHROOT"
"--label=io.containers.autoupdate=registry" "--label=io.containers.autoupdate=registry"
]; ];
}; };

View file

@ -37,7 +37,6 @@ let
config.age.secrets.immich-typesense-env.path config.age.secrets.immich-typesense-env.path
]; ];
extraOptions = [ extraOptions = [
"--runtime-flag=directfs=false"
"--runtime-flag=network=host" "--runtime-flag=network=host"
"--uidmap=0:65534:1" "--uidmap=0:65534:1"
"--gidmap=0:65534:1" "--gidmap=0:65534:1"