refactor unit tests

testdata/TestEnvFilesOnly.podman.nix

@@ -0,0 +1,367 @@
+{ pkgs, lib, ... }:
+
+{
+  # Runtime
+  virtualisation.podman = {
+    enable = true;
+    autoPrune.enable = true;
+    dockerCompat = true;
+    defaultNetwork.settings = {
+      # Required for container networking to be able to use names.
+      dns_enabled = true;
+    };
+  };
+  virtualisation.oci-containers.backend = "podman";
+
+  # Containers
+  virtualisation.oci-containers.containers."jellyseerr" = {
+    image = "docker.io/fallenbagel/jellyseerr:latest";
+    environmentFiles = [
+      "testdata/input.env"
+    ];
+    volumes = [
+      "/var/volumes/jellyseerr:/app/config:rw"
+      "books:/books:rw"
+    ];
+    cmd = [ "ls" "-la" "/" ];
+    labels = {
+      "traefik.enable" = "true";
+      "traefik.http.routers.jellyseerr.middlewares" = "chain-authelia@file";
+      "traefik.http.routers.jellyseerr.rule" = "Host(`requests.hello.us`)";
+      "traefik.http.routers.jellyseerr.tls.certresolver" = "htpc";
+    };
+    dependsOn = [
+      "myproject-sabnzbd"
+    ];
+    log-driver = "journald";
+    autoStart = false;
+    extraOptions = [
+      "--cpu-quota=1.5"
+      "--cpus=1.0"
+      "--dns=1.1.1.1"
+      "--health-cmd='curl -f http://localhost/\${POTATO}'"
+      "--log-opt=compress=true"
+      "--log-opt=max-file=3"
+      "--log-opt=max-size=10m"
+      "--memory-reservation=524288000b"
+      "--memory=1048576000b"
+      "--network=container:myproject-sabnzbd"
+    ];
+  };
+  systemd.services."podman-jellyseerr" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 500 "on-failure";
+      RestartSec = lib.mkOverride 500 "5s";
+    };
+    startLimitBurst = 3;
+    unitConfig = {
+      StartLimitIntervalSec = lib.mkOverride 500 120;
+    };
+    after = [
+      "podman-volume-books.service"
+    ];
+    requires = [
+      "podman-volume-books.service"
+    ];
+    partOf = [
+      "podman-compose-myproject-root.target"
+    ];
+    unitConfig.UpheldBy = [
+      "podman-myproject-sabnzbd.service"
+    ];
+    wantedBy = [
+      "podman-compose-myproject-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."myproject-sabnzbd" = {
+    image = "lscr.io/linuxserver/sabnzbd";
+    environmentFiles = [
+      "testdata/input.env"
+    ];
+    volumes = [
+      "/var/volumes/sabnzbd:/config:rw"
+      "storage:/storage:rw"
+    ];
+    labels = {
+      "traefik.enable" = "true";
+      "traefik.http.routers.sabnzbd.middlewares" = "chain-authelia@file";
+      "traefik.http.routers.sabnzbd.rule" = "Host(`hey.hello.us`) && PathPrefix(`/sabnzbd`)";
+      "traefik.http.routers.sabnzbd.tls.certresolver" = "htpc";
+    };
+    log-driver = "journald";
+    autoStart = false;
+    extraOptions = [
+      "--health-cmd='curl -f http://localhost/'"
+      "--hostname=sabnzbd"
+      "--log-opt=compress=true"
+      "--log-opt=max-file=3"
+      "--log-opt=max-size=10m"
+      "--network-alias=sabnzbd"
+      "--network=myproject-default"
+    ];
+  };
+  systemd.services."podman-myproject-sabnzbd" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 500 "always";
+      RuntimeMaxSec = lib.mkOverride 500 10;
+    };
+    unitConfig = {
+      Description = lib.mkOverride 500 "This is the sabnzbd container!";
+    };
+    after = [
+      "podman-network-myproject-default.service"
+      "podman-volume-storage.service"
+    ];
+    requires = [
+      "podman-network-myproject-default.service"
+      "podman-volume-storage.service"
+    ];
+    partOf = [
+      "podman-compose-myproject-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-myproject-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."photoprism-mariadb" = {
+    image = "docker.io/library/mariadb:10.9";
+    environmentFiles = [
+      "testdata/input.env"
+    ];
+    volumes = [
+      "/var/volumes/photoprism-mariadb:/var/lib/mysql:rw"
+      "photos:/photos:rw"
+    ];
+    user = "1000:1000";
+    log-driver = "journald";
+    autoStart = false;
+    extraOptions = [
+      "--health-cmd='[\"curl\",\"-f\",\"http://localhost\"]'"
+      "--health-interval=1m30s"
+      "--health-retries=3"
+      "--health-start-interval=5s"
+      "--health-start-period=40s"
+      "--health-timeout=10s"
+      "--log-opt=compress=true"
+      "--log-opt=max-file=3"
+      "--log-opt=max-size=10m"
+      "--network=host"
+    ];
+  };
+  systemd.services."podman-photoprism-mariadb" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 500 "always";
+      RestartSec = lib.mkOverride 500 "3m0s";
+    };
+    startLimitBurst = 10;
+    unitConfig = {
+      StartLimitIntervalSec = lib.mkOverride 500 "infinity";
+    };
+    after = [
+      "podman-volume-photos.service"
+    ];
+    requires = [
+      "podman-volume-photos.service"
+    ];
+    partOf = [
+      "podman-compose-myproject-root.target"
+    ];
+    wantedBy = [
+      "podman-compose-myproject-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."torrent-client" = {
+    image = "docker.io/haugene/transmission-openvpn";
+    environmentFiles = [
+      "testdata/input.env"
+    ];
+    volumes = [
+      "/etc/localtime:/etc/localtime:ro"
+      "/var/volumes/transmission/config:/config:rw"
+      "/var/volumes/transmission/scripts:/scripts:rw"
+      "storage:/storage:rw"
+    ];
+    ports = [
+      "9091:9091/tcp"
+    ];
+    labels = {
+      "autoheal" = "true";
+      "traefik.enable" = "true";
+      "traefik.http.routers.transmission.middlewares" = "chain-authelia@file";
+      "traefik.http.routers.transmission.rule" = "Host(`hey.hello.us`) && PathPrefix(`/transmission`)";
+      "traefik.http.routers.transmission.tls.certresolver" = "htpc";
+      "traefik.http.services.transmission.loadbalancer.server.port" = "9091";
+    };
+    dependsOn = [
+      "myproject-sabnzbd"
+    ];
+    log-driver = "journald";
+    autoStart = false;
+    extraOptions = [
+      "--add-host=abc:93.184.216.34"
+      "--cap-add=NET_ADMIN"
+      "--device=/dev/net/tun:/dev/net/tun"
+      "--dns=8.8.4.4"
+      "--dns=8.8.8.8"
+      "--network-alias=transmission"
+      "--network=myproject-something:alias=my-torrent-client"
+      "--no-healthcheck"
+      "--privileged"
+      "--shm-size=67108864"
+      "--sysctl=net.ipv6.conf.all.disable_ipv6=0"
+    ];
+  };
+  systemd.services."podman-torrent-client" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 500 "on-failure";
+    };
+    startLimitBurst = 3;
+    unitConfig = {
+      StartLimitIntervalSec = lib.mkOverride 500 "infinity";
+    };
+    after = [
+      "podman-network-myproject-something.service"
+      "podman-volume-storage.service"
+    ];
+    requires = [
+      "podman-network-myproject-something.service"
+      "podman-volume-storage.service"
+    ];
+    partOf = [
+      "podman-compose-myproject-root.target"
+    ];
+    unitConfig.UpheldBy = [
+      "podman-myproject-sabnzbd.service"
+    ];
+    wantedBy = [
+      "podman-compose-myproject-root.target"
+    ];
+  };
+  virtualisation.oci-containers.containers."traefik" = {
+    image = "docker.io/library/traefik";
+    environmentFiles = [
+      "testdata/input.env"
+    ];
+    volumes = [
+      "/var/run/podman/podman.sock:/var/run/docker.sock:ro"
+      "/var/volumes/traefik:/etc/traefik:rw"
+    ];
+    ports = [
+      "80:80/tcp"
+      "443:443/tcp"
+    ];
+    labels = {
+      "traefik.enable" = "true";
+      "traefik.http.routers.traefik.entrypoints" = "https";
+      "traefik.http.routers.traefik.middlewares" = "chain-authelia@file";
+      "traefik.http.routers.traefik.rule" = "Host(`hey.hello.us`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))";
+      "traefik.http.routers.traefik.service" = "api@internal";
+      "traefik.http.routers.traefik.tls.certresolver" = "htpc";
+    };
+    dependsOn = [
+      "sabnzbd"
+    ];
+    log-driver = "journald";
+    autoStart = false;
+    extraOptions = [
+      "--log-opt=compress=true"
+      "--log-opt=max-file=3"
+      "--log-opt=max-size=10m"
+      "--network=container:sabnzbd"
+      "--runtime=nvidia"
+      "--security-opt=label=disable"
+    ];
+  };
+  systemd.services."podman-traefik" = {
+    serviceConfig = {
+      Restart = lib.mkOverride 500 "no";
+    };
+    unitConfig = {
+      AllowIsolate = lib.mkOverride 500 true;
+    };
+    partOf = [
+      "podman-compose-myproject-root.target"
+    ];
+    unitConfig.UpheldBy = [
+      "podman-sabnzbd.service"
+    ];
+    wantedBy = [
+      "podman-compose-myproject-root.target"
+    ];
+  };
+
+  # Networks
+  systemd.services."podman-network-myproject-default" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStop = "${pkgs.podman}/bin/podman network rm -f myproject-default";
+    };
+    script = ''
+      podman network inspect myproject-default || podman network create myproject-default --opt=isolate=true
+    '';
+    partOf = [ "podman-compose-myproject-root.target" ];
+    wantedBy = [ "podman-compose-myproject-root.target" ];
+  };
+  systemd.services."podman-network-myproject-something" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+      ExecStop = "${pkgs.podman}/bin/podman network rm -f myproject-something";
+    };
+    script = ''
+      podman network inspect myproject-something || podman network create myproject-something --opt=isolate=true --label=test-label=okay
+    '';
+    partOf = [ "podman-compose-myproject-root.target" ];
+    wantedBy = [ "podman-compose-myproject-root.target" ];
+  };
+
+  # Volumes
+  systemd.services."podman-volume-books" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      podman volume inspect books || podman volume create books --opt=device=/mnt/media/Books --opt=o=bind --opt=type=none
+    '';
+    partOf = [ "podman-compose-myproject-root.target" ];
+    wantedBy = [ "podman-compose-myproject-root.target" ];
+  };
+  systemd.services."podman-volume-photos" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      podman volume inspect photos || podman volume create photos --opt=device=/mnt/photos --opt=o=bind --opt=type=none --label=test-label=okay
+    '';
+    partOf = [ "podman-compose-myproject-root.target" ];
+    wantedBy = [ "podman-compose-myproject-root.target" ];
+  };
+  systemd.services."podman-volume-storage" = {
+    path = [ pkgs.podman ];
+    serviceConfig = {
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
+    script = ''
+      podman volume inspect storage || podman volume create storage --opt=device=/mnt/media --opt=o=bind --opt=type=none
+    '';
+    partOf = [ "podman-compose-myproject-root.target" ];
+    wantedBy = [ "podman-compose-myproject-root.target" ];
+  };
+
+  # Root service
+  # When started, this will automatically create all resources and start
+  # the containers. When stopped, this will teardown all resources.
+  systemd.targets."podman-compose-myproject-root" = {
+    unitConfig = {
+      Description = "Root target generated by compose2nix.";
+    };
+  };
+}