zpericic
ca1b8cf1ba
Quadlet does not support User= in system units: the generated pod service writes its conmon pidfile to %t/%N.pid, which resolves to /run/authelia-pod.pid and is unwritable by the authelia user, so authelia-pod.service always failed with status 125. See podman-systemd.unit(5). - Move all quadlet files and drop-ins to the rootless search path /etc/containers/systemd/users/126; units now run in the authelia user's systemd manager, started at boot via linger - Drop the [Service] User=/HOME overrides from the quadlet files - Enable the pod via WantedBy=default.target - Make /etc/authelia authelia-owned so rootless podman can relabel the config bind mount (:z) - Replace system-unit systemd macros in the -container scriptlets with systemctl --user -M authelia@ daemon-reload / stop
21 lines
471 B
INI
21 lines
471 B
INI
[Unit]
|
|
Description=Authelia Redis session store
|
|
|
|
[Container]
|
|
Image=docker.io/library/redis:8.4-alpine@sha256:bd4a0d37e7cd830117ffec9329052b4a1887afa060c265e1768f82b177ff6f43
|
|
ContainerName=authelia-redis
|
|
Volume=/var/lib/authelia/redis:/data:Z
|
|
Exec=redis-server --save 60 1
|
|
HealthCmd=redis-cli ping
|
|
HealthInterval=30s
|
|
HealthTimeout=10s
|
|
HealthRetries=5
|
|
HealthStartPeriod=30s
|
|
HealthOnFailure=kill
|
|
LogDriver=journald
|
|
|
|
[Service]
|
|
Restart=always
|
|
RestartSec=5
|
|
TimeoutStartSec=900
|