mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-03-20 03:57:02 +08:00
8104cee874
Right now, podman on el9 isn't reading the policy correctly. This is because the env for the unit isn't getting picked up by podman, so instead pass --env-file to read it from a file. Also, we want to setup a private key for the download servers so they all have the same challenge creation (so if you hit 01 you want your challenge to be good on 02, etc). Signed-off-by: Kevin Fenzi <kevin@scrye.com>
20 lines
508 B
Desktop File
20 lines
508 B
Desktop File
[Unit]
|
|
Description=Anubis Container
|
|
|
|
[Service]
|
|
User=anubis
|
|
ExecStartPre=-/usr/bin/podman stop -t 1 %n
|
|
ExecStartPre=-/usr/bin/podman rm %n --force
|
|
ExecStart=/usr/bin/podman run \
|
|
--net=host --userns=keep-id \
|
|
--rm=true --name %n \
|
|
-v /srv/anubis:/srv/anubis \
|
|
--env-file=/srv/anubis/cfg/env \
|
|
--publish 8923:8923 \
|
|
ghcr.io/techarohq/anubis:latest
|
|
ExecStop=/usr/bin/podman stop -t 1 %n
|
|
KillMode=none
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|