These describe how this repo's image is run; they belong with it rather than in the third-party image repo. Captured from the live units on bob, with the postgres password redacted out of the DSN. Records the two things that are easy to get wrong and expensive to rediscover: the db -> server -> electric ordering (the server's migrations create the role and publication Electric attaches to, and Electric's Requires= means a server restart stops it without bringing it back), and the firewalld/aardvark interaction that presents as an auth failure. Image= is a pinned immutable tag and AutoUpdate=registry is gone: podman-auto-update.timer is enabled on bob, so a floating tag would let the timer decide which build is running.
9 lines
304 B
SYSTEMD
9 lines
304 B
SYSTEMD
# Private bridge for the vibe-kanban stack (postgres + electric + remote-server).
|
|
# Only remote-server publishes a host port (27180); postgres and electric are
|
|
# reachable only by container name on this network, never from the LAN.
|
|
[Network]
|
|
NetworkName=vibe-kanban
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|