feat(tsuba): Add image pruning systemd timer

nixos/tsuba/configuration.nix

@@ -5,8 +5,6 @@
   device,
   ...
 }: {
-  virtualisation.docker.enable = true;
-  virtualisation.oci-containers.backend = "docker";
   users.extraUsers.servius.extraGroups = ["docker"];
   networking.firewall.enable = false;
   services.openssh.enable = true;

nixos/tsuba/services/default.nix

@@ -12,5 +12,6 @@
     ./monitoring.nix
     ./pihole.nix
     ./resolved.nix
+    ./docker.nix
   ];
 }

nixos/tsuba/services/docker.nix

@@ -0,0 +1,21 @@
+{pkgs, ...}: {
+  virtualisation.docker.enable = true;
+  virtualisation.oci-containers.backend = "docker";
+  systemd.services.docker-prune-image = {
+    description = "Docker prune unused images";
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart = "${pkgs.docker}/bin/docker image prune -f";
+    };
+  };
+  systemd.timers.docker-prune-image = {
+    description = "Timer for docker image prune";
+    wantedBy = ["timers.target"];
+    timerConfig = {
+      OnCalendar = "Mon *-*-* 02:00:00";
+      OnUnitInactiveSec = "6d";
+      Persistent = true;
+      RandomizedDelaySec = "1h";
+    };
+  };
+}

nixos/tsuba/services/jellyfin.nix

@@ -50,7 +50,7 @@
     description = "Pull latest Jellyfin Docker image";
     serviceConfig = {
       Type = "oneshot";
-      ExecStart = "${pkgs.docker}/bin/docker pull ghcr.io/jellyfin/jellyfin:latest";
+      ExecStart = "${pkgs.docker}/bin/docker pull jellyfin/jellyfin:latest";
       ExecStartPost = "${pkgs.systemd}/bin/systemctl restart docker-jellyfin.service";
     };
   };