distrobox

hosts/workstation/configuration.nix

@@ -6,6 +6,7 @@
     ../../pkgs/obs-studio.nix
   ];
   my = {
+    enableContainers = true;
     emacs.enable = true;
     apps = {
       art.enable = true;
@@ -76,6 +77,7 @@
     groups.nixremote.gid = 555;
     users = {
       jawz.packages = with pkgs; [
+        distrobox # install packages from other os
         gocryptfs # encrypted filesystem! shhh!!!
         torrenttools # create torrent files from the terminal!
         vcsi # video thumbnails for torrents, can I replace it with ^?
@@ -130,9 +132,4 @@
       directoryRoot = "/resilio";
     };
   };
-  virtualisation.podman = {
-    enable = true;
-    dockerCompat = true;
-    defaultNetwork.settings.dns_enabled = true;
-  };
 }

modules/servers.nix

@@ -24,7 +24,7 @@ let
         proxy_http_version 1.1;
       '';
     };
-  enableDocker = lib.any (opt: opt) [
+  enableContainers = lib.any (opt: opt) [
     config.my.servers.collabora.enable
     config.my.servers.ryot.enable
     config.my.servers.lidarr.enable
@@ -103,8 +103,10 @@ in {
       default = "CaptainJawZ@protonmail.com";
       description = "localhost smtp email";
     };
+    enableContainers = lib.mkEnableOption "enable";
   };
   config = {
+    my.enableContainers = lib.mkDefault false;
     my.servers = {
       jellyfin = {
         enable = lib.mkDefault false;
@@ -143,7 +145,7 @@ in {
     virtualisation = {
       containers.enable = true;
       oci-containers.backend = "podman";
-      podman = lib.mkIf enableDocker {
+      podman = lib.mkIf enableContainers {
         enable = true;
         dockerCompat = true;
         dockerSocket.enable = true;
@@ -155,7 +157,7 @@ in {
         };
       };
     };
-    security.acme = lib.mkIf config.services.nginx.enable {
+    security.acme = lib.mkIf (config.services.nginx.enable || config.my.enableContainers) {
       acceptTerms = true;
       defaults.email = config.my.email;
     };