infra/modules/nixos/services/systemd/network.nix

{ config, pkgs, self, ... }:

let
  network_compose_dir = pkgs.stdenv.mkDerivation {
    name = "network_compose_dir";
    src = self + "/assets/compose/network";
    dontUnpack = true;
    installPhase = ''
      mkdir -p $out
      cp -r $src/* $out/
    '';
  };
in
{
  networking.firewall.allowedTCPPorts = [ 80 443 ];

  systemd.services.network_stack = {
    description = "Traefik + DDNS updater via Docker Compose";
    after = [ "network-online.target" "docker.service" ];
    wants = [ "network-online.target" "docker.service" ];
    serviceConfig = {
      WorkingDirectory = "${network_compose_dir}";

      EnvironmentFile = config.age.secrets.containers_env.path;

      # Stop left over container by the same name
      ExecStartPre = "${pkgs.bash}/bin/bash -c '${pkgs.docker-compose}/bin/docker-compose down || true'";

      # Start the services using Docker Compose
      ExecStart = "${pkgs.docker-compose}/bin/docker-compose up -d";

      # Stop and remove containers on shutdown
      ExecStop = "${pkgs.docker-compose}/bin/docker-compose down";

      RemainAfterExit = true;
      TimeoutStartSec = 0;
    };
    wantedBy = [ "multi-user.target" ];
  };
}