Page MenuHomeNawan HQ

Use podman secret to securely store and pass secrets to the Readeck container
Closed, ResolvedPublic

Event Timeline

nawan changed the task status from Open to In Progress.Mon, Oct 5, 00:15
nawan moved this task from Inbox to Doing on the Infra board.
nawan moved this task from Inbox to Doing on the User-nawan board.
[Unit]
Description=Readeck - Open Source bookmark manager
After=network-online.target firewalld.service
Wants=network-online.target

[Container]
UserNS=auto:size=65535
Image=codeberg.org/readeck/readeck:latest
Volume=readeck-data:/readeck:U
AutoUpdate=registry
PublishPort=127.0.0.1:8000:8000
Environment=HOME=/readeck
Environment=READECK_SERVER_HOST=0.0.0.0
Environment=READECK_AUTH_OIDC_PROVIDERS_x_NAME="Single User Login"
Environment=READECK_AUTH_OIDC_PROVIDERS_x_URL=https://auth.nawan.my.id/
Environment=READECK_AUTH_OIDC_PROVIDERS_x_CLIENT_ID=bdabf00af427f35e2753a0e87368b913bd302131dae819e698f38d698367031d
Secret=readeck_auth_oidc_secret,type=env,target=READECK_AUTH_OIDC_PROVIDERS_x_CLIENT_SECRET

[Service]
Restart=always
TimeoutStartSec=900
# ProtectSystem=strict
ProtectHome=yes
# PrivateTmp=yes
PrivateDevices=yes
# ReadWritePaths=/var/lib/containers /var/lib/cni /run

[Install]
WantedBy=multi-user.target
nawan changed the visibility from "Custom Policy" to "Public (No Login Required)".Mon, Oct 5, 00:25