zpericic
ca1b8cf1ba
Quadlet does not support User= in system units: the generated pod service writes its conmon pidfile to %t/%N.pid, which resolves to /run/authelia-pod.pid and is unwritable by the authelia user, so authelia-pod.service always failed with status 125. See podman-systemd.unit(5). - Move all quadlet files and drop-ins to the rootless search path /etc/containers/systemd/users/126; units now run in the authelia user's systemd manager, started at boot via linger - Drop the [Service] User=/HOME overrides from the quadlet files - Enable the pod via WantedBy=default.target - Make /etc/authelia authelia-owned so rootless podman can relabel the config bind mount (:z) - Replace system-unit systemd macros in the -container scriptlets with systemctl --user -M authelia@ daemon-reload / stop
21 lines
527 B
INI
21 lines
527 B
INI
[Unit]
|
|
Description=Authelia PostgreSQL Database
|
|
|
|
[Container]
|
|
Image=docker.io/library/postgres:18.1-trixie@sha256:1090bc3a8ccfb0b55f78a494d76f8d603434f7e4553543d6e807bc7bd6bbd17f
|
|
ContainerName=authelia-db
|
|
Volume=/var/lib/authelia/postgresql:/var/lib/postgresql:Z
|
|
Exec=postgres -c shared_buffers=128MB -c min_wal_size=80MB
|
|
HealthCmd=pg_isready -U authelia
|
|
HealthInterval=30s
|
|
HealthTimeout=10s
|
|
HealthRetries=5
|
|
HealthStartPeriod=1m
|
|
HealthOnFailure=kill
|
|
LogDriver=journald
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=5
|
|
TimeoutStartSec=900
|