death916/nixconfig
1
0
Fork 0
mirror of https://github.com/Death916/nixconfig.git synced 2026-04-10 02:54:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

karakeep docker

Browse source
This commit is contained in:
death916 2025-12-16 03:31:13 -08:00
parent db209930e4
commit f310b87e1b
3 changed files with 190 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

188
modules/containers/docker/karakeep/docker-compose.nix Normal file
View file

@ -0,0 +1,188 @@
# Auto-generated by compose2nix.
{ pkgs, lib, ... }:
{
# Runtime
virtualisation.docker = {
enable = true;
autoPrune.enable = true;
};
virtualisation.oci-containers.backend = "docker";
# Containers
virtualisation.oci-containers.containers."karakeep-chrome" = {
image = "gcr.io/zenika-hub/alpine-chrome:124";
cmd = [ "--no-sandbox" "--disable-gpu" "--disable-dev-shm-usage" "--remote-debugging-address=0.0.0.0" "--remote-debugging-port=9222" "--hide-scrollbars" ];
log-driver = "journald";
extraOptions = [
"--network-alias=chrome"
"--network=karakeep_default"
];
};
systemd.services."docker-karakeep-chrome" = {
serviceConfig = {
Restart = lib.mkOverride 90 "always";
RestartMaxDelaySec = lib.mkOverride 90 "1m";
RestartSec = lib.mkOverride 90 "100ms";
RestartSteps = lib.mkOverride 90 9;
};
after = [
"docker-network-karakeep_default.service"
];
requires = [
"docker-network-karakeep_default.service"
];
partOf = [
"docker-compose-karakeep-root.target"
];
wantedBy = [
"docker-compose-karakeep-root.target"
];
};
virtualisation.oci-containers.containers."karakeep-meilisearch" = {
image = "getmeili/meilisearch:v1.13.3";
environment = {
"DATA_DIR" = "/mnt/myjfs/volumes/hoarder/";
"INFERENCE_IMAGE_MODEL" = "gemini-2.0-flash";
"INFERENCE_TEXT_MODEL" = "gemini-2.0-flash";
"KARAKEEP_VERSION" = "release";
"MEILI_NO_ANALYTICS" = "true";
"NEXTAUTH_URL" = "http://localhost";
"OPENAI_BASE_URL" = "https://generativelanguage.googleapis.com/v1beta";
};
environmentFiles = [
/etc/nixos/secrets/karakeep.env
];
volumes = [
"karakeep_meilisearch:/meili_data:rw"
];
log-driver = "journald";
extraOptions = [
"--network-alias=meilisearch"
"--network=karakeep_default"
];
};
systemd.services."docker-karakeep-meilisearch" = {
serviceConfig = {
Restart = lib.mkOverride 90 "always";
RestartMaxDelaySec = lib.mkOverride 90 "1m";
RestartSec = lib.mkOverride 90 "100ms";
RestartSteps = lib.mkOverride 90 9;
};
after = [
"docker-network-karakeep_default.service"
"docker-volume-karakeep_meilisearch.service"
];
requires = [
"docker-network-karakeep_default.service"
"docker-volume-karakeep_meilisearch.service"
];
partOf = [
"docker-compose-karakeep-root.target"
];
wantedBy = [
"docker-compose-karakeep-root.target"
];
};
virtualisation.oci-containers.containers."karakeep-web" = {
image = "ghcr.io/karakeep-app/karakeep:release";
environment = {
"BROWSER_WEB_URL" = "http://chrome:9222";
"DATA_DIR" = "/data";
"INFERENCE_IMAGE_MODEL" = "gemini-2.0-flash";
"INFERENCE_TEXT_MODEL" = "gemini-2.0-flash";
"KARAKEEP_VERSION" = "release";
"MEILI_ADDR" = "http://meilisearch:7700";
"NEXTAUTH_URL" = "http://localhost";
"OPENAI_BASE_URL" = "https://generativelanguage.googleapis.com/v1beta";
};
environmentFiles = [
/etc/nixos/secrets/karakeep.env
];
volumes = [
"karakeep_data:/data:rw"
];
ports = [
"3000:3000/tcp"
];
log-driver = "journald";
extraOptions = [
"--network-alias=web"
"--network=karakeep_default"
];
};
systemd.services."docker-karakeep-web" = {
serviceConfig = {
Restart = lib.mkOverride 90 "always";
RestartMaxDelaySec = lib.mkOverride 90 "1m";
RestartSec = lib.mkOverride 90 "100ms";
RestartSteps = lib.mkOverride 90 9;
};
after = [
"docker-network-karakeep_default.service"
"docker-volume-karakeep_data.service"
];
requires = [
"docker-network-karakeep_default.service"
"docker-volume-karakeep_data.service"
];
partOf = [
"docker-compose-karakeep-root.target"
];
wantedBy = [
"docker-compose-karakeep-root.target"
];
};
# Networks
systemd.services."docker-network-karakeep_default" = {
path = [ pkgs.docker ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
ExecStop = "docker network rm -f karakeep_default";
};
script = ''
docker network inspect karakeep_default || docker network create karakeep_default
'';
partOf = [ "docker-compose-karakeep-root.target" ];
wantedBy = [ "docker-compose-karakeep-root.target" ];
};
# Volumes
systemd.services."docker-volume-karakeep_data" = {
path = [ pkgs.docker ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
script = ''
docker volume inspect karakeep_data || docker volume create karakeep_data
'';
partOf = [ "docker-compose-karakeep-root.target" ];
wantedBy = [ "docker-compose-karakeep-root.target" ];
};
systemd.services."docker-volume-karakeep_meilisearch" = {
path = [ pkgs.docker ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
};
script = ''
docker volume inspect karakeep_meilisearch || docker volume create karakeep_meilisearch
'';
partOf = [ "docker-compose-karakeep-root.target" ];
wantedBy = [ "docker-compose-karakeep-root.target" ];
};
# Root service
# When started, this will automatically create all resources and start
# the containers. When stopped, this will teardown all resources.
systemd.targets."docker-compose-karakeep-root" = {
unitConfig = {
Description = "Root target generated by compose2nix.";
};
wantedBy = [ "multi-user.target" ];
};
}

2
modules/nixos/orac/services.nix
View file

@ -42,7 +42,7 @@
};
services.karakeep = {
enable = true;
enable = false;
meilisearch.enable = true;
browser.enable = true;
environmentFile = "/etc/nixos/secrets/karakeep.env";

1
nixos/orac.nix
View file

@ -7,6 +7,7 @@
../modules/adguard.nix
../modules/containers/docker/juicefs.nix
../modules/nixos/orac/restic.nix
../modules/containers/docker/karakeep/docker-compose.nix
];
networking.firewall = {