Frank
b206f477ad
Cutover of the six surviving dankserver services from compose-era bare
containers to boot-persistent Quadlet units (WantedBy=default.target; podman
5.x v1 generator honors it at user-manager start).
Units are faithful to live inspect ground truth (image pins = running tags,
not compose inventory):
- romm trio shares one data root: /home/dank/Containers/romm mounted whole at
/romm; mariadb datadir and redis data dir live inside it. Aliases mariadb/
redis preserved on dankserver_appnet via Network=...:alias=. Secrets stay in
the host-local env file (EnvironmentFile + ${VAR} expansion in the generated
ExecStart, gitea precedent). copyparty passes its admin account via
Exec=-a ${COPAY_ACCOUNT}:${COPAY_PASSWORD} (Exec= not Command=: the v1
generator hard-fails on Command=); entropy stays rw only there.
- jellyfin keeps every creation-time env as Environment= lines (zero drift);
Device=/dev/dri + GroupAdd=keep-groups preserve hardware transcoding.
- calibre-web pins the exact running image tag (id 986277563e76 =
0.6.27-ls397), pasta network preserved.
Deployer: first-cutover handlers retire the old container, rescue unshadowed
anonymous-volume content (podman volume export + tar --skip-old-files), mv
data roots on the same fs, then start units in dependency order with health
gates. Re-deploys restart only the selected unit. deploy-plan.py maps compose
keys mariadb/redis to the new unit names; allowlists updated. New seam test
tests/dankserver_quadlet.bats pins boot-persistence + v1-generator contract;
test-changed.sh maps the new dirs to it. Full suite green (209 tests).
43 lines
1.4 KiB
INI
43 lines
1.4 KiB
INI
# Quadlet unit: RomM library manager (rootless, boot-persistent).
|
|
#
|
|
# Install path on dankserver: ~/.config/containers/systemd/romm.container
|
|
# Unit name: romm.service (podman 5.x drops the container- prefix)
|
|
#
|
|
# The whole data root lives at /home/dank/Containers/romm and is mounted at
|
|
# /romm, so config/, library/, resources/ and assets/ sit inside it exactly as
|
|
# the compose-era bind mounts + anonymous volume did. Secrets (DB_PASSWD,
|
|
# ROMM_AUTH_SECRET_KEY, ROMM_PASSWORD, SCREENSCRAPER_DEV_*) live in the
|
|
# host-local env file /home/dank/Containers/romm/env (mode 0600); this file
|
|
# holds no secrets. The network dankserver_appnet must exist before first
|
|
# start (it is the compose-era network; on a fresh host create it first).
|
|
|
|
[Unit]
|
|
Description=RomM library manager container
|
|
Wants=romm-mariadb.service
|
|
After=romm-mariadb.service romm-redis.service network.target
|
|
|
|
[Container]
|
|
ContainerName=romm
|
|
Image=ghcr.io/rommapp/romm:latest
|
|
Network=dankserver_appnet
|
|
EnvironmentFile=/home/dank/Containers/romm/env
|
|
Environment=DB_HOST=mariadb
|
|
Environment=DB_NAME=romm
|
|
Environment=DB_USER=romm
|
|
Environment=REDIS_HOST=redis
|
|
Environment=HASHEOUS_API_ENABLED=true
|
|
PublishPort=8085:8080
|
|
Volume=/home/dank/Containers/romm:/romm
|
|
HealthCmd=curl -f http://localhost:8080/health
|
|
HealthInterval=30s
|
|
HealthTimeout=10s
|
|
HealthRetries=3
|
|
|
|
[Service]
|
|
EnvironmentFile=/home/dank/Containers/romm/env
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=default.target
|