ghoscht/nix-config
ghoscht/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Arion: Bump infrastructure & add diun rules

Browse source 
crowdsec: v1.6.2->v1.6.3
This commit is contained in:
GHOSCHT 2024-09-14 16:48:00 +02:00
parent df43ff334c
commit 39b8fd69d7
Signed by: ghoscht
GPG key ID: 2C2C1C62A5388E82
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
hosts/franz/arion/infrastructure/arion-compose.nix
View file

@ -35,6 +35,11 @@
"traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme" = "https"; "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme" = "https";
"traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto" = "https"; "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto" = "https";
"diun.enable" = "true";
"diun.watch_repo" = "true";
"diun.sort_tags" = "semver";
"diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$$";
}; };
volumes = [ volumes = [
"/home/ghoscht/.docker/infrastructure/traefik_config/traefik.yml:/traefik.yml:ro" "/home/ghoscht/.docker/infrastructure/traefik_config/traefik.yml:/traefik.yml:ro"
@ -52,7 +57,7 @@
]; ];
}; };
crowdsec.service = { crowdsec.service = {
image = "crowdsecurity/crowdsec:v1.6.2"; image = "crowdsecurity/crowdsec:v1.6.3";
container_name = "crowdsec"; container_name = "crowdsec";
environment = { environment = {
GID = "1000"; GID = "1000";
@ -67,6 +72,12 @@
"traefik-logs:/var/log/traefik/:ro" "traefik-logs:/var/log/traefik/:ro"
"/var/run/docker.sock:/var/run/docker.sock:ro" "/var/run/docker.sock:/var/run/docker.sock:ro"
]; ];
labels = {
"diun.enable" = "true";
"diun.watch_repo" = "true";
"diun.sort_tags" = "semver";
"diun.include_tags" = "^v\\d+\\.\\d+\\.\\d+$$";
};
depends_on = [ depends_on = [
"traefik" "traefik"
]; ];