mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 11:02:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
31 lines
1.2 KiB
Django/Jinja
31 lines
1.2 KiB
Django/Jinja
# Managed by Ansible. Do not edit manually.
|
|
[Unit]
|
|
Description=Atlas rootless Syncthing backend
|
|
|
|
[Container]
|
|
ContainerName=atlas-syncthing
|
|
Image={{ backend_phase1_syncthing_image }}
|
|
HostName=atlas-syncthing
|
|
UserNS=keep-id
|
|
User={{ backend_phase1_uid }}
|
|
Group={{ backend_phase1_gid }}
|
|
PublishPort={{ backend_phase1_wireguard_address }}:{{ backend_phase1_syncthing_gui_port }}:{{ backend_phase1_syncthing_gui_port }}
|
|
PublishPort={{ backend_phase1_wireguard_address }}:{{ backend_phase1_syncthing_transfer_port }}:{{ backend_phase1_syncthing_transfer_port }}
|
|
PublishPort={{ backend_phase1_wireguard_address }}:{{ backend_phase1_syncthing_transfer_port }}:{{ backend_phase1_syncthing_transfer_port }}/udp
|
|
PublishPort={{ backend_phase1_wireguard_address }}:{{ backend_phase1_syncthing_discovery_port }}:{{ backend_phase1_syncthing_discovery_port }}/udp
|
|
Environment=HOME=/var/syncthing
|
|
Environment=STHOMEDIR=/var/syncthing/config
|
|
Environment=STGUIADDRESS=0.0.0.0:{{ backend_phase1_syncthing_gui_port }}
|
|
Environment=TZ={{ backend_phase1_timezone }}
|
|
Volume={{ backend_phase1_syncthing_root }}:/var/syncthing:Z
|
|
NoNewPrivileges=true
|
|
DropCapability=all
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=10
|
|
TimeoutStartSec=900
|
|
|
|
[Install]
|
|
WantedBy=default.target
|