albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Testing a self-hosted docker registry

Browse source
This commit is contained in:
albert 2025-02-22 11:50:06 -08:00
parent a05179a8f6
commit ae18e109f4
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 32 additions and 26 deletions

58
nixos/common/services/docker.nix
View file

@ -1,33 +1,39 @@
{ inputs, pkgs, system, ... }: {
boot.kernel.sysctl = {
"fs.inotify.max_user_watches" = 52428800;
"fs.inotify.max_user_instances" = 4096;
boot.kernel.sysctl = {
"fs.inotify.max_user_watches" = 52428800;
"fs.inotify.max_user_instances" = 4096;
# Testing...
# "net.core.netdev_max_backlog" = 4000;
# "net.ipv4.tcp_max_syn_backlog" = 4096;
# Testing...
# "net.core.netdev_max_backlog" = 4000;
# "net.ipv4.tcp_max_syn_backlog" = 4096;
};
# Allow Docker containers to access Tailscale network
networking.firewall = {
trustedInterfaces = [ "tailscale0" ];
allowedUDPPorts = [ 41641 ]; # Tailscale port
};
virtualisation.docker = {
enable = true;
enableOnBoot = true;
liveRestore = true;
autoPrune = {
enable = true;
dates = "weekly";
flags = "--all";
};
# Allow Docker containers to access Tailscale network
networking.firewall = {
trustedInterfaces = [ "tailscale0" ];
allowedUDPPorts = [ 41641 ]; # Tailscale port
daemon.settings = {
registry-mirrors = [ "https://registry.sysctl.io" ];
};
};
virtualisation.docker = {
enable = true;
enableOnBoot = true;
autoPrune.enable = true;
autoPrune.dates = "weekly";
liveRestore = true;
};
environment.systemPackages = with pkgs; [
docker-compose
ctop
];
environment.systemPackages = with pkgs; [
docker-compose
ctop
];
# Add the docker telegraf listener
services.telegraf.extraConfig.inputs.docker = {};
users.users.telegraf.extraGroups = [ "docker" ];
# Add the docker telegraf listener
services.telegraf.extraConfig.inputs.docker = {};
users.users.telegraf.extraGroups = [ "docker" ];
}