[Unit]
Description=Luci CI
After=network-online.target podman.socket
Wants=network-online.target podman.socket

[Container]
ContainerName=luci
Image=localhost/bugabinga-luci:latest
RunInit=true
PublishPort=8081:8080
PublishPort=${luci_ssh_peer_port}:2223
NoNewPrivileges=true
SecurityLabelDisable=true
Environment=LUCI_DATA_DIR=/data/ci
Environment=LUCI_REPO_ROOTS=/data/vcs/public/repos
Environment=LUCI_HTTP_ADDR=0.0.0.0:8080
Environment=LUCI_BASE_URL=https://ci.bugabinga.net
Environment=LUCI_INBOX_DIR=/data/ci/inbox
Environment=LUCI_PODMAN_SOCKET=unix:///run/podman/podman.sock
Environment=LUCI_SSH_ADDR=0.0.0.0:2223
Environment=LUCI_SSH_AUTHORIZED_KEYS=/data/ci/authorized_keys
Environment=LUCI_DEFAULT_TIMEOUT=40m
Environment=LUCI_THEME_CSS=/data/ci/nugu.css
Environment=LUCI_PUBLISH_REGISTRY_AUTH_FILE=/run/secrets/zot-auth.json
Environment=LUCI_PUBLISH_PKG_ROOT=/data/pkg
Environment=LUCI_PUBLISH_SITE_ROOT=/data/sites
Volume=/data/ci:/data/ci:Z
Volume=/data/ci/secrets:/run/secrets:ro,z
Volume=/data/vcs/public/repos:/data/vcs/public/repos:ro,z
Volume=/data/pkg:/data/pkg:z
Volume=/data/sites:/data/sites:z
Volume=%t/podman/podman.sock:/run/podman/podman.sock

[Service]
ExecStartPre=/usr/bin/find /data/ci/workspaces -mindepth 1 -delete
Restart=always
TimeoutStartSec=300

[Install]
WantedBy=default.target