mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
23 lines
550 B
Django/Jinja
23 lines
550 B
Django/Jinja
# Managed by Ansible. Do not edit manually.
|
|
[Unit]
|
|
Description=Atlas Immich PostgreSQL database
|
|
|
|
[Container]
|
|
ContainerName=atlas-immich-postgres
|
|
Image={{ atlas_immich_postgres_image }}
|
|
User={{ atlas_immich_uid }}:{{ atlas_immich_gid }}
|
|
Network=atlas-media.network
|
|
NetworkAlias=atlas-immich-postgres
|
|
EnvironmentFile=/etc/immich/immich.env
|
|
Volume={{ atlas_immich_postgres_data_dir }}:/var/lib/postgresql/data:Z
|
|
ShmSize=128m
|
|
NoNewPrivileges=true
|
|
DropCapability=NET_RAW
|
|
|
|
[Service]
|
|
Restart=always
|
|
TimeoutStartSec=900
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|