containers

This commit is contained in:
mjallen18
2025-10-05 22:16:44 -05:00
parent ee48ca08bd
commit 02b5dd32a2
5 changed files with 31 additions and 70 deletions

View File

@@ -65,19 +65,6 @@ let
};
};
};
networking = {
firewall = {
enable = true;
allowedTCPPorts = [ cfg.port ];
};
# Use systemd-resolved inside the container
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
useHostResolvConf = lib.mkForce false;
};
services.resolved.enable = true;
system.stateVersion = "23.11";
};
bindMounts = {
@@ -99,7 +86,7 @@ let
(lib.${namespace}.mkContainer {
name = "actual";
localAddress = cfg.localAddress;
port = cfg.port;
ports = [ cfg.port ];
bindMounts = bindMounts;
config = actualConfig;
})