nix/nixos/hosts/milan-linode-01/containers/derp.nix

{ ... }: {
    services.cron = {
      enable = true;
      systemCronJobs = [
          ''0 0 * * * root mkdir -p  /Storage/Data/Docker/sysctl.io/letsencrypt/; rsync -avr  root@framework-server:/Storage/Data/Docker/sysctl.io/letsencrypt/ /Storage/Data/Docker/sysctl.io/letsencrypt/''
      ];
    };

  # Containers
  virtualisation.oci-containers.containers."derp" = {
    image = "docker.io/fredliang/derper";
    environment = {
      DERP_ADDR = ":1443";
      DERP_CERT_DIR = "/app/certs";
      DERP_CERT_MODE = "manual";
      DERP_DOMAIN = "milan.sysctl.io";
      DERP_STUN = "true";
      DERP_VERIFY_CLIENTS = "true";
    };
    volumes = [
      "/var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock:ro"
      "/Storage/Data/Docker/sysctl.io/letsencrypt/external/certificates/certs/*.sysctl.io.crt:/app/certs/milan.sysctl.io.crt:ro"
      "/Storage/Data/Docker/sysctl.io/letsencrypt/external/certificates/private/*.sysctl.io.key:/app/certs/milan.sysctl.io.key:ro"
    ];
    ports = [
      "3478:3478/udp"
      "1443:1443/tcp"
    ];
    log-driver = "journald";
  };
}