Adds actual budget

home/tga/dyndns

@@ -2,7 +2,7 @@
 set -o errexit -o pipefail -o noclobber -o nounset -o errtrace -o functrace
 
 update_url=https://infomaniak.com/nic/update
-subdomains=(finance git home homebox import.finance komga mail matrix mealie navidrome nextcloud nexus odoo overleaf paperless photos pihole tasks torrent wallabag wiki zigbee)
+subdomains=(budget finance git home homebox import.finance komga mail matrix mealie navidrome nextcloud nexus odoo overleaf paperless photos pihole tasks torrent wallabag wiki zigbee)
 data_file="${HOME}/.dyndns"
 file="${HOME}/tmp_data.txt"
 for subdomain in "${subdomains[@]}"; do

init/enable-all-quadlets

@@ -6,7 +6,7 @@ setsebool -P openvpn_run_unconfined on
 semanage fcontext -a -t container_file_t "/mnt/nas(/.*)?"
 restorecon -vR /mnt/nas
 
-users=("firefly" "gitea" "homeassistant" "homebox" "immich" "firefly" "jdownloader" "kiwix" "komga" "navidrome" "nextcloud" "nexus" "nginx" "overleaf" "pairdrop" "paperless" "pihole" "qbittorrent" "synapse" "vikunja" "wallabag")
+users=("budget" "firefly" "gitea" "homeassistant" "homebox" "immich" "firefly" "jdownloader" "kiwix" "komga" "navidrome" "nextcloud" "nexus" "nginx" "overleaf" "pairdrop" "paperless" "pihole" "qbittorrent" "synapse" "vikunja" "wallabag")
 for user in "${users[@]}"; do
   chown -R "${user}:${user}" "/var/home/${user}"
   secrets_file="/var/home/${user}/.secrets"

quadlets/budget/budget-data.volume

@@ -0,0 +1,7 @@
+[Volume]
+Copy=true
+Device=/var/mnt/nas/containers/budget/storage/data
+Driver=local
+Options=bind
+Type=none
+VolumeName=budget-data

quadlets/budget/budget.container

@@ -0,0 +1,23 @@
+[Unit]
+Description=Actual Budget container
+
+[Container]
+AutoUpdate=registry
+ContainerName=budget
+Environment=TZ=Europe/Zurich
+HealthCmd=node scripts/health-check.js
+HealthInterval=60s
+HealthTimeout=10s
+HealthRetries=5
+Image=docker.io/actualbudget/actual-server:latest
+Label=io.containers.autoupdate=registry
+Pod=budget.pod
+StartWithPod=true
+Timezone=Europe/Zurich
+Volume=budget-data.volume:/data
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target

quadlets/budget/budget.pod

@@ -0,0 +1,3 @@
+[Pod]
+PodName=budget
+PublishPort=9030:5006

quadlets/firefly/firefly-importer.container

@@ -98,7 +98,10 @@ Environment=VERIFY_TLS_SECURITY=true
 Image=docker.io/fireflyiii/data-importer:latest
 Label=io.containers.autoupdate=registry
 Pod=firefly.pod
+Secret=app-key,type=env,target=APP_KEY
 Secret=auto-import,type=env,target=AUTO_IMPORT_SECRET
+Secret=passport-private-key,type=env,target=PASSPORT_PRIVATE_KEY
+Secret=passport-public-key,type=env,target=PASSPORT_PUBLIC_KEY
 StartWithPod=true
 Timezone=Europe/Zurich
 Volume=firefly-upload.volume:/var/www/html/storage/upload

services/kiwix/clone-zim-updater.service

@@ -4,7 +4,7 @@ ConditionPathExists=!/var/home/kiwix/kiwix-zim-updater
 
 [Service]
 Type=oneshot
-ExecStart=bash -c "cd /var/home/kiwix && git clone https://github.com/jojo2357/kiwix-zim-updater.git"
+ExecStart=/bin/bash -c "cd /var/home/kiwix && git clone https://github.com/jojo2357/kiwix-zim-updater.git"
 RemainAfterExit=true
 
 [Install]

services/nginx/create-certificate@.service

@@ -3,6 +3,7 @@ Description=Creates a certificate
 
 [Service]
 Type=oneshot
+ExecStart=/usr/bin/mkdir /var/mnt/nas/containers/nginx/storage/certs/%I
 ExecStart=/usr/bin/podman exec -it acme --issue --server https://acme-v02.api.letsencrypt.org/directory --webroot /usr/share/nginx/html \
 --cert-file /etc/nginx/certs/%I/cert.pem --key-file /etc/nginx/certs/%I/key.pem \
 --ca-file /etc/nginx/certs/%I/chain.pem --fullchain-file /etc/nginx/certs/%I/fullchain.pem \