Testing

nixos/hosts/framework-server/default.nix

@@ -14,6 +14,7 @@
     ./wireguard.nix
     ./cron.nix
     ./firewall.nix
+    ./docker
   ];
 
   environment.systemPackages =  [

nixos/hosts/framework-server/docker/default.nix

@@ -0,0 +1,6 @@
+{}: {
+  import = [
+    ./internal
+    ./external
+  ];
+}

nixos/hosts/framework-server/docker/external/default.nix

@@ -0,0 +1,5 @@
+{}: {
+  imports = [
+
+  ];
+}

nixos/hosts/framework-server/docker/internal/default.nix

@@ -0,0 +1,5 @@
+{}: {
+  imports = [
+    ./it-tools.nix
+  ];
+}

nixos/hosts/framework-server/docker/internal/it-tools.nix

@@ -0,0 +1,37 @@
+{ ... }: {
+  virtualisation.oci-containers.containers."it-tools" = {
+    image = "docker.io/fredliang/derper";
+    container_name = "it-tools";
+    log-driver = "journald";
+    restart = "always";
+    depends_on = [
+      "promtail"
+      "traefik-int"
+    ];
+    labels = {
+      type = "internal";
+      traefik = {
+        enable = true;
+        docker.network = "sysctlio_default";
+        http = {
+          routers.it-tools = {
+            tls.enable = "true";
+            tls.certresolver = "letsencrypt-int";
+            entrypoints = "web-secure-int";
+            rule = "Host(`sysctl.io`)";
+          };
+          services.it-tools = {
+            loadbalancer.server.port = 80;
+          };
+        };
+      };
+      # Flame Configs
+      flame = {
+        icon = "home";
+        type = "app";
+        url = "https://sysctl.io";
+        name = "Cyberchef";
+      };
+    };
+  };
+}