ansible-edda/playbooks/roles/services/deploy/rproxy/templates/systemd/container-rproxy-nginx.service

44 lines
2.1 KiB
SYSTEMD
Raw Normal View History

[Unit]
2023-07-17 22:31:05 +02:00
Description=Podman container-{{ services_service_name }}-nginx.service
Documentation=man:podman-generate-systemd(1)
Wants=network.target
After=network-online.target
2023-07-17 22:31:05 +02:00
BindsTo=pod-{{ services_service_name }}.service
After=pod-{{ services_service_name }}.service
OnFailure=status-mail@%n.service
[Service]
Environment=PODMAN_SYSTEMD_UNIT=%n
Restart=on-failure
TimeoutStopSec=70
2023-07-30 10:39:55 +02:00
ExecStartPre=/usr/bin/sh -c 'echo resolver $(awk '\''BEGIN{ORS=" "} $1=="nameserver" {print $2}'\'' {{ system_etc_root_directory }}/resolv.conf) ";" > %t/resolver.conf'
2023-07-17 22:31:05 +02:00
ExecStartPre=/bin/rm -f %t/container-{{ services_service_name }}-nginx.pid %t/container-{{ services_service_name }}-nginx.ctr-id
2022-11-02 19:36:59 +01:00
ExecStart=/usr/bin/podman run \
--conmon-pidfile %t/container-{{ services_service_name }}-nginx.pid \
--cidfile %t/container-{{ services_service_name }}-nginx.ctr-id \
--cgroups=no-conmon \
--pod-id-file %t/pod-{{ services_service_name }}.pod-id \
--replace \
--label "io.containers.autoupdate=image" \
--log-driver=journald \
-dt \
-v {{ system_etc_root_directory }}/resolv.conf:/etc/resolv.conf:ro \
-v ./.config/service/hosts:/etc/hosts:ro \
-v %t/resolver.conf:/etc/nginx/resolver.conf:ro \
-v ./.config/service/nginx.conf:/etc/nginx/nginx.conf:ro \
-v ./.config/service/stream.conf:/etc/nginx/stream.conf:ro \
-v ./.config/service/nginx-conf.d:/etc/nginx/conf.d:ro \
-v ./.config/service/dhparam.pem:/etc/ssl/certs/dhparam.pem:ro \
-v {{ services_data_directory }}/{{ services_service_user_name }}/etc-letsencrypt/_data:/etc/letsencrypt:ro \
-v var-lib-letsencrypt:/var/lib/letsencrypt:ro \
-v var-www-html:/var/www/html \
--name=pod-{{ services_service_name }}-nginx \
docker.io/library/nginx:{{ services_service_deploy_versions.nginx }}
2023-07-17 22:31:05 +02:00
ExecStop=/usr/bin/podman stop --ignore --cidfile %t/container-{{ services_service_name }}-nginx.ctr-id -t 10
ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile %t/container-{{ services_service_name }}-nginx.ctr-id
PIDFile=%t/container-{{ services_service_name }}-nginx.pid
Type=forking
[Install]
WantedBy=multi-user.target default.target