Frank
b206f477ad
Cutover of the six surviving dankserver services from compose-era bare
containers to boot-persistent Quadlet units (WantedBy=default.target; podman
5.x v1 generator honors it at user-manager start).
Units are faithful to live inspect ground truth (image pins = running tags,
not compose inventory):
- romm trio shares one data root: /home/dank/Containers/romm mounted whole at
/romm; mariadb datadir and redis data dir live inside it. Aliases mariadb/
redis preserved on dankserver_appnet via Network=...:alias=. Secrets stay in
the host-local env file (EnvironmentFile + ${VAR} expansion in the generated
ExecStart, gitea precedent). copyparty passes its admin account via
Exec=-a ${COPAY_ACCOUNT}:${COPAY_PASSWORD} (Exec= not Command=: the v1
generator hard-fails on Command=); entropy stays rw only there.
- jellyfin keeps every creation-time env as Environment= lines (zero drift);
Device=/dev/dri + GroupAdd=keep-groups preserve hardware transcoding.
- calibre-web pins the exact running image tag (id 986277563e76 =
0.6.27-ls397), pasta network preserved.
Deployer: first-cutover handlers retire the old container, rescue unshadowed
anonymous-volume content (podman volume export + tar --skip-old-files), mv
data roots on the same fs, then start units in dependency order with health
gates. Re-deploys restart only the selected unit. deploy-plan.py maps compose
keys mariadb/redis to the new unit names; allowlists updated. New seam test
tests/dankserver_quadlet.bats pins boot-persistence + v1-generator contract;
test-changed.sh maps the new dirs to it. Full suite green (209 tests).
44 lines
1.4 KiB
INI
44 lines
1.4 KiB
INI
# Quadlet unit: Calibre-Web library server (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankserver:
|
|
# ~/.config/containers/systemd/calibre-web.container
|
|
# Unit name: calibre-web.service (podman 5.x drops the container- prefix)
|
|
#
|
|
# The data roots already lived under /home/dank/Containers/calibre-web in the
|
|
# compose era; this unit keeps those exact paths. The image pin is the exact
|
|
# tag of the image the live container runs (image id 986277563e76), so the
|
|
# cutover recreation changes zero bits of application code. No secrets: this
|
|
# unit takes no EnvironmentFile.
|
|
|
|
[Unit]
|
|
Description=Calibre-Web library server container
|
|
After=network.target
|
|
|
|
[Container]
|
|
ContainerName=calibre-web
|
|
Image=lscr.io/linuxserver/calibre-web:0.6.27-ls397
|
|
Network=pasta
|
|
Environment=DOCKER_MODS=linuxserver/mods:universal-calibre
|
|
Environment=LANG=en_US.UTF-8
|
|
Environment=LANGUAGE=en_US.UTF-8
|
|
Environment=LSIO_FIRST_PARTY=true
|
|
Environment=OAUTHLIB_RELAX_TOKEN_SCOPE=1
|
|
Environment=PGID=1000
|
|
Environment=PUID=1000
|
|
Environment=QTWEBENGINE_CHROMIUM_FLAGS=--no-sandbox
|
|
Environment=S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0
|
|
Environment=S6_STAGE2_HOOK=/docker-mods
|
|
Environment=TERM=xterm
|
|
Environment=TZ=America/Vancouver
|
|
Environment=VIRTUAL_ENV=/lsiopy
|
|
PublishPort=8083:8083
|
|
Volume=/home/dank/Containers/calibre-web/config:/config
|
|
Volume=/home/dank/Containers/calibre-web/books:/books
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=default.target
|