⬆️: upgrade bpg/proxmox

.gitea/workflows/lint.yml

@@ -6,7 +6,7 @@ on:  # yamllint disable-line rule:truthy
 
 jobs:
   terraform-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-podman
     steps:
       - name: Check out code
         uses: actions/checkout@v4

modules/proxmox_lxc_container/variables.tf

@@ -77,5 +77,7 @@ variable "disk" {
 variable "debian_tmpl" {
   description = "Debian template to use"
   type        = string
-  default     = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
+  default     = "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
+  ## other possible value
+  # "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
 }

terraform.tfvars

@@ -1,6 +1,7 @@
 lxc_containers = {
   haproxy = {
     server_desc = "* HAProxy (point de terminaison TLS IPv4)"
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     ip_suffix   = 2
     tags = [
       "lbservers"
@@ -9,13 +10,14 @@ lxc_containers = {
 
   bt = {
     server_desc = "* Transmission\n* Sonarr\n* Jackett"
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     ip_suffix   = 3
     tags = [
       "btservers",
       "resticservers",
       "webservers",
     ]
-    memory_dedicated = 2048
+    memory_dedicated = 1024
     unprivileged     = false
     disk = [{
       size = "150G"
@@ -48,6 +50,7 @@ lxc_containers = {
   web1 = {
     server_desc = "* Shaarli\n* FreshRSS\n* Nextcloud\n* Blog\n* Roundcube\n* Firefly3\n* Repo\n* Koillection"
     ip_suffix   = 5
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     tags = [
       "pgsqlservers",
       "phpservers",
@@ -96,6 +99,7 @@ lxc_containers = {
   voice1 = {
     server_desc = "* Mumble"
     ip_suffix   = 7
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     tags = [
       "mumbleservers",
       "resticservers"
@@ -107,6 +111,7 @@ lxc_containers = {
   syslog = {
     server_desc = "* syslog-ng"
     ip_suffix   = 8
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     tags = [
       "rsyslogservers"
     ]
@@ -119,6 +124,7 @@ lxc_containers = {
   voice3 = {
     server_desc = "* Icecast2"
     ip_suffix   = 9
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     tags = [
       "icecastservers",
       "webservers"
@@ -204,17 +210,29 @@ lxc_containers = {
     server_desc = "* Gitea"
     ip_suffix   = 16
     tags = [
+      "actrunnerservers",
       "giteaservers",
+      "dockerservers",
       "pgsqlservers",
       "resticservers",
       "webservers",
     ]
-    memory_dedicated = 512
-    cpu_cores        = 1
+    memory_dedicated = 1024
+    cpu_cores        = 2
+    features = {
+      nesting = true
+      keyctl  = true
+      fuse    = true
+      mount   = null
+    }
     disk = [{
       size = "30G"
       path = "/srv"
       },
+      {
+        size = "10G"
+        path = "/var/lib/docker"
+      },
       {
         size = "5G"
         path = "/var/lib/postgresql"
@@ -232,6 +250,7 @@ lxc_containers = {
 
   vlt1 = {
     server_desc = "* Vaultwarden"
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     ip_suffix   = 18
     tags = [
       "resticservers",
@@ -257,7 +276,7 @@ lxc_containers = {
         path = "/srv"
       },
       {
-        size = "20G"
+        size = "10G"
         path = "/var/lib/postgresql"
       }
     ]
@@ -289,6 +308,7 @@ lxc_containers = {
   es1 = {
     server_desc = "Elastic Search"
     ip_suffix   = 21
+    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
     tags = [
       "resticservers",
       "elasticsearchservers"
@@ -322,20 +342,4 @@ lxc_containers = {
       }
     ]
   }
-
-  git2 = {
-    server_desc  = "* act_runner"
-    ip_suffix    = 23
-    unprivileged = false
-    tags = [
-      "podmanservers",
-      "actrunnerservers"
-    ]
-    cpu_cores        = 2
-    memory_dedicated = 2048
-    disk = [{
-      size = "10G"
-      path = "/srv"
-    }]
-  }
 }

variables.tf

@@ -9,7 +9,7 @@ variable "lxc_containers" {
     unprivileged     = optional(bool, true)
     started          = optional(bool, true)
     start_on_boot    = optional(bool, false)
-    debian_tmpl      = optional(string, "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst")
+    debian_tmpl      = optional(string, "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst")
     disk = optional(list(object({
       path = string
       size = string