Add Podman container infrastructure role for containerized services

- Implemented complete Podman infrastructure role following rick-infra patterns
- Minimal installation approach: only install podman, trust Arch dependency management
- Configured with crun runtime for optimal performance and security
- Security-focused: HTTPS-only registries, rootless containers, systemd hardening
- Registry support: docker.io, quay.io, ghcr.io with secure configurations
- Ready for service-specific users with isolated container environments
- Quadlet support for native systemd container management
- Container-to-host networking via bridge networks with host gateway access
- Foundation for future containerized services (Authentik, Nextcloud)
- Maintains rick-infra philosophy: infrastructure provides foundation, apps manage specifics
This commit is contained in:
2025-11-20 22:11:44 +01:00
parent 3b062edeb6
commit 500224b5de
8 changed files with 483 additions and 2 deletions

View File

@@ -0,0 +1,27 @@
---
# Podman Infrastructure Role - Meta Information
galaxy_info:
author: rick-infra
description: Podman container infrastructure role for rick-infra project
company: Personal Infrastructure
license: MIT
min_ansible_version: 2.9
platforms:
- name: ArchLinux
versions:
- all
galaxy_tags:
- podman
- containers
- infrastructure
- systemd
- rootless
# Dependencies
# Podman is a foundational infrastructure service with no dependencies
dependencies: []
# Role provides container infrastructure for other services to consume