- Base + service (native binary), container (rootless quadlet), postgresql and redis subpackages - Fixed UID/GID 126 for the authelia user - Rootless pod publishing 127.0.0.1:9091; db and redis join the pod (container) or publish on localhost (service) - Container images pinned by digest - Native -service subpackage built conditionally (--without service)
23 lines
576 B
INI
23 lines
576 B
INI
[Unit]
|
|
Description=Authelia PostgreSQL Database
|
|
|
|
[Container]
|
|
Image=docker.io/library/postgres:18.1-trixie@sha256:1090bc3a8ccfb0b55f78a494d76f8d603434f7e4553543d6e807bc7bd6bbd17f
|
|
ContainerName=authelia-db
|
|
Volume=/var/lib/authelia/postgresql:/var/lib/postgresql:Z
|
|
Exec=postgres -c shared_buffers=128MB -c min_wal_size=80MB
|
|
HealthCmd=pg_isready -U authelia
|
|
HealthInterval=30s
|
|
HealthTimeout=10s
|
|
HealthRetries=5
|
|
HealthStartPeriod=1m
|
|
HealthOnFailure=kill
|
|
LogDriver=journald
|
|
|
|
[Service]
|
|
User=authelia
|
|
Environment=HOME=/var/lib/authelia
|
|
Restart=always
|
|
RestartSec=5
|
|
TimeoutStartSec=900
|