put container images into a .image quadlet to pre-pull images before services start

cookbooks/gitea/gitea.container

@@ -12,7 +12,7 @@ PartOf=gitea.target
 
 [Container]
 ContainerName=gitea
-Image=docker.gitea.com/gitea:latest
+Image=gitea.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/gitea/gitea.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.gitea.com/gitea
+Documentation=https://docs.gitea.com/
+
+[Image]
+Image=docker.gitea.com/gitea:latest

cookbooks/lego/lego-renew.container

@@ -15,7 +15,7 @@ User=10023
 Group=10000
 
 # Image
-Image=docker.io/goacme/lego:latest
+Image=lego.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/lego/lego-run.container

@@ -16,7 +16,7 @@ User=10023
 Group=10000
 
 # Image
-Image=docker.io/goacme/lego:latest
+Image=lego.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/lego/lego.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.io/goacme/lego
+Documentation=https://go-acme.github.io/lego/
+
+[Image]
+Image=docker.io/goacme/lego:latest

cookbooks/miniflux/miniflux.container

@@ -11,7 +11,7 @@ PartOf=miniflux.target
 
 [Container]
 ContainerName=miniflux
-Image=ghcr.io/miniflux/miniflux:latest
+Image=miniflux.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/miniflux/miniflux.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull ghcr.io/miniflux/miniflux
+Documentation=https://github.com/miniflux/v2
+
+[Image]
+Image=ghcr.io/miniflux/miniflux:latest

cookbooks/nextcloud/nextcloud-app.container

@@ -14,7 +14,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-app
-Image=docker.io/library/nextcloud:${NEXTCLOUD_MAJOR}-fpm-alpine
+Image=nextcloud.image
 
 # No need for root privileges
 User=www-data

cookbooks/nextcloud/nextcloud-collabora.container

@@ -11,7 +11,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-collabora
-Image=docker.io/collabora/code:latest
+Image=nextcloud-collabora.image
 
 # No need for root privileges
 User=1001

cookbooks/nextcloud/nextcloud-collabora.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.io/collabora/code
+Documentation=https://hub.docker.com/r/collabora/code/
+
+[Image]
+Image=docker.io/collabora/code:latest

cookbooks/nextcloud/nextcloud-cron.container

@@ -11,7 +11,7 @@ ConditionPathExists=/var/lib/virtiofs/data/nextcloud/config/config.php
 
 [Container]
 ContainerName=nextcloud-cron-job
-Image=docker.io/library/nextcloud:${NEXTCLOUD_MAJOR}-fpm-alpine
+Image=nextcloud.image
 
 # No need for root privileges
 User=www-data

cookbooks/nextcloud/nextcloud-init.container

@@ -15,7 +15,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-init-job
-Image=docker.io/library/nextcloud:${NEXTCLOUD_MAJOR}-fpm-alpine
+Image=nextcloud.image
 
 # No need for root privileges
 User=www-data

cookbooks/nextcloud/nextcloud-nginx.container

@@ -12,7 +12,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-nginx
-Image=docker.io/nginxinc/nginx-unprivileged:${NGINX_MAJOR}-alpine
+Image=nextcloud-nginx.image
 
 # Network configuration
 Network=host

cookbooks/nextcloud/nextcloud-nginx.image

@@ -0,0 +1,13 @@
+[Unit]
+Description=podman pull docker.io/nginxinc/nginx-unprivileged
+Documentation=https://hub.docker.com/r/nginxinc/nginx-unprivileged/
+
+# Only start if Nextcloud has been configured
+ConditionPathExists=/etc/quadlets/nextcloud/config.env
+
+[Image]
+Image=docker.io/nginxinc/nginx-unprivileged:${NGINX_MAJOR}-alpine
+
+[Service]
+# These environment variables are sourced to be used by systemd in the Exec* commands
+EnvironmentFile=/etc/quadlets/nextcloud/config.env

cookbooks/nextcloud/nextcloud-redis.container

@@ -11,7 +11,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-redis
-Image=docker.io/library/redis:${REDIS_MAJOR}-alpine
+Image=nextcloud-redis.image
 
 # Network configuration
 Network=host

cookbooks/nextcloud/nextcloud-redis.image

@@ -0,0 +1,13 @@
+[Unit]
+Description=podman pull docker.io/library/redis
+Documentation=https://hub.docker.com/_/redis/
+
+# Only start if Nextcloud has been configured
+ConditionPathExists=/etc/quadlets/nextcloud/config.env
+
+[Image]
+Image=docker.io/library/redis:${REDIS_MAJOR}-alpine
+
+[Service]
+# These environment variables are sourced to be used by systemd in the Exec* commands
+EnvironmentFile=/etc/quadlets/nextcloud/config.env

cookbooks/nextcloud/nextcloud-upgrade.container

@@ -15,7 +15,7 @@ PartOf=nextcloud.target
 
 [Container]
 ContainerName=nextcloud-upgrade-to-${NEXTCLOUD_MAJOR}-job
-Image=docker.io/library/nextcloud:${NEXTCLOUD_MAJOR}-fpm-alpine
+Image=nextcloud.image
 
 # No need for root privileges
 User=www-data

cookbooks/nextcloud/nextcloud.image

@@ -0,0 +1,13 @@
+[Unit]
+Description=podman pull docker.io/library/nextcloud
+Documentation=https://hub.docker.com/_/nextcloud/
+
+# Only start if Nextcloud has been configured
+ConditionPathExists=/etc/quadlets/nextcloud/config.env
+
+[Image]
+Image=docker.io/library/nextcloud:${NEXTCLOUD_MAJOR}-fpm-alpine
+
+[Service]
+# These environment variables are sourced to be used by systemd in the Exec* commands
+EnvironmentFile=/etc/quadlets/nextcloud/config.env

cookbooks/nginx/nginx-git.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.io/alpine/git
+Documentation=https://hub.docker.com/r/alpine/git
+
+[Image]
+Image=docker.io/alpine/git:latest

cookbooks/nginx/nginx-init.container

@@ -14,7 +14,7 @@ PartOf=nginx.target
 
 [Container]
 ContainerName=nginx-init-job
-Image=docker.io/alpine/git:latest
+Image=nginx-git.image
 
 # Network configuration
 Network=host

cookbooks/nginx/nginx-server.container

@@ -14,7 +14,7 @@ PartOf=nginx.target
 
 [Container]
 ContainerName=nginx-server
-Image=docker.io/library/nginx:mainline-alpine
+Image=nginx.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/nginx/nginx-update.container

@@ -14,7 +14,7 @@ PartOf=nginx.target
 
 [Container]
 ContainerName=nginx-update-job
-Image=docker.io/alpine/git:latest
+Image=nginx-git.image
 
 # Network configuration
 Network=host

cookbooks/nginx/nginx.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.io/library/nginx
+Documentation=https://hub.docker.com/_/nginx
+
+[Image]
+Image=docker.io/library/nginx:mainline-alpine

cookbooks/restic-server/restic-server.container

@@ -8,7 +8,7 @@ RequiresMountsFor=/var/lib/virtiofs/data /var
 ContainerName=restic
 
 # Image
-Image=docker.io/restic/rest-server:latest
+Image=restic-server.image
 AutoUpdate=registry
 
 # Security

cookbooks/restic-server/restic-server.image

@@ -0,0 +1,5 @@
+[Unit]
+Description=podman pull docker.io/restic/rest-server
+
+[Image]
+Image=docker.io/restic/rest-server:latest

cookbooks/seedbox/flaresolverr.container

@@ -8,7 +8,7 @@ After=network-online.target
 ContainerName=flaresolverr
 
 # Image
-Image=ghcr.io/flaresolverr/flaresolverr:latest
+Image=flaresolverr.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/flaresolverr.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull ghcr.io/flaresolverr/flaresolverr
+Documentation=https://github.com/FlareSolverr/FlareSolverr/
+
+[Image]
+Image=ghcr.io/flaresolverr/flaresolverr:latest

cookbooks/seedbox/jellyfin.container

@@ -10,7 +10,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=jellyfin
 
 # Image
-Image=lscr.io/linuxserver/jellyfin:latest
+Image=jellyfin.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/jellyfin.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/jellyfin
+Documentation=https://docs.linuxserver.io/images/docker-jellyfin/
+
+[Image]
+Image=lscr.io/linuxserver/jellyfin:latest

cookbooks/seedbox/lidarr.container

@@ -10,7 +10,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=lidarr
 
 # Image
-Image=lscr.io/linuxserver/lidarr:latest
+Image=lidarr.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/lidarr.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/lidarr
+Documentation=https://docs.linuxserver.io/images/docker-lidarr/
+
+[Image]
+Image=lscr.io/linuxserver/lidarr:latest

cookbooks/seedbox/prowlarr.container

@@ -10,7 +10,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=prowlarr
 
 # Image
-Image=lscr.io/linuxserver/prowlarr:latest
+Image=prowlarr.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/prowlarr.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/prowlarr
+Documentation=https://docs.linuxserver.io/images/docker-prowlarr/
+
+[Image]
+Image=lscr.io/linuxserver/prowlarr:latest

cookbooks/seedbox/qbittorrent.container

@@ -9,7 +9,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=qbittorrent
 
 # Image
-Image=lscr.io/linuxserver/qbittorrent:latest
+Image=qbittorrent.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/qbittorrent.image

@@ -0,0 +1,5 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/qbittorrent
+
+[Image]
+Image=lscr.io/linuxserver/qbittorrent:latest

cookbooks/seedbox/radarr.container

@@ -10,7 +10,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=radarr
 
 # Image
-Image=lscr.io/linuxserver/radarr:latest
+Image=radarr.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/radarr.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/radarr
+Documentation=https://docs.linuxserver.io/images/docker-radarr/
+
+[Image]
+Image=lscr.io/linuxserver/radarr:latest

cookbooks/seedbox/sonarr.container

@@ -10,7 +10,7 @@ ConditionPathIsMountPoint=/var/lib/virtiofs/data
 ContainerName=sonarr
 
 # Image
-Image=lscr.io/linuxserver/sonarr:latest
+Image=sonarr.image
 AutoUpdate=registry
 
 # Security

cookbooks/seedbox/sonarr.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/sonarr
+Documentation=https://docs.linuxserver.io/images/docker-sonarr/
+
+[Image]
+Image=lscr.io/linuxserver/sonarr:latest

cookbooks/traefik/traefik.container

@@ -11,7 +11,7 @@ PartOf=traefik.target
 ContainerName=traefik
 
 # Image
-Image=docker.io/library/traefik:v3.4
+Image=traefik.image
 AutoUpdate=registry
 
 # No need for root privileges

cookbooks/traefik/traefik.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull docker.io/library/traefik
+Documentation=https://github.com/traefik/traefik-library-image
+
+[Image]
+Image=docker.io/library/traefik:v3.4

cookbooks/unifi/unifi-app.container

@@ -12,7 +12,7 @@ PartOf=unifi.target
 
 [Container]
 ContainerName=unifi-app
-Image=lscr.io/linuxserver/unifi-network-application:latest
+Image=unifi-app.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/unifi/unifi-app.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull lscr.io/linuxserver/unifi-network-application
+Documentation=https://docs.linuxserver.io/images/docker-unifi-network-application/
+
+[Image]
+Image=lscr.io/linuxserver/unifi-network-application:latest

cookbooks/unifi/unifi-mongo.container

@@ -11,7 +11,7 @@ PartOf=unifi.target
 
 [Container]
 ContainerName=unifi-mongo
-Image=docker.io/library/mongo:${MONGO_MAJOR}
+Image=unifi-mongo.image
 AutoUpdate=registry
 
 # Network configuration

cookbooks/unifi/unifi-mongo.image

@@ -0,0 +1,13 @@
+[Unit]
+Description=podman pull docker.io/library/mongo
+Documentation=https://hub.docker.com/_/mongo/
+
+# Only start if Unifi has been configured
+ConditionPathExists=/etc/quadlets/unifi/config.env
+
+[Image]
+Image=docker.io/library/mongo:${MONGO_MAJOR}
+
+[Service]
+# These environment variables are sourced to be used by systemd in the Exec* commands
+EnvironmentFile=/etc/quadlets/unifi/config.env

cookbooks/vaultwarden/vaultwarden.container

@@ -12,7 +12,7 @@ PartOf=vaultwarden.target
 
 [Container]
 ContainerName=vaultwarden
-Image=quay.io/vaultwarden/server:latest-alpine
+Image=vaultwarden.image
 AutoUpdate=registry
 
 # No need for root privileges

cookbooks/vaultwarden/vaultwarden.image

@@ -0,0 +1,6 @@
+[Unit]
+Description=podman pull quay.io/vaultwarden/server
+Documentation=https://github.com/dani-garcia/vaultwarden
+
+[Image]
+Image=quay.io/vaultwarden/server:latest-alpine

cookbooks/vmagent/vmagent.container

@@ -10,7 +10,7 @@ ConditionPathExists=/etc/quadlets/vmagent/vmagent.local.env
 ContainerName=vmagent
 
 # Image
-Image=quay.io/victoriametrics/vmagent:latest
+Image=vmagent.image
 AutoUpdate=registry
 
 # Security

cookbooks/vmagent/vmagent.image

@@ -0,0 +1,5 @@
+[Unit]
+Description=podman pull quay.io/victoriametrics/vmagent
+
+[Image]
+Image=quay.io/victoriametrics/vmagent:latest