feature(docker): make changes to the rootless docker setup to support the netgame webapp which relies on k3d and traefik

2026-10-07 16:05:46 +02:00
parent 3b961d447b
commit e9b3e5961c
1 changed files with 6 additions and 0 deletions
@@ -12,4 +12,10 @@
      registry-mirrors = [ "https://mirror.gcr.io" ];
    };
  };
  # k3s/k3d in rootless docker needs the cpuset controller delegated to the user session
  systemd.services."user@".serviceConfig.Delegate = "cpu cpuset io memory pids";
  # let rootless docker publish ports 80/443 (e.g. k3d traefik ingress)
  boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 80;
 }