neiam /devendra

# podman auto-update (reusable fragment).
#   include = ["include/podman-auto-update.toml"]
#
# Enables the timer that runs `podman auto-update`: it pulls newer images for
# containers labeled AutoUpdate=registry (which our quadlets set) and restarts
# the ones whose image changed, rolling back automatically if the new image
# fails to start. The timer + service ship with podman — we just enable them.
# https://docs.podman.io/en/latest/markdown/podman-auto-update.1.html

# Schedule override via a drop-in (the "correct" way — don't edit podman's
# shipped unit). Empty OnCalendar= first clears podman's default before setting
# ours; the wide RandomizedDelaySec spreads pulls across a fleet so they don't
# all hammer the registry at once. Persistent catches up if the box was off.
[[files]]
path = "/etc/systemd/system/podman-auto-update.timer.d/schedule.conf"
mode = "0644"
content = """
[Timer]
OnCalendar=
OnCalendar=*-*-* 04:00:00
RandomizedDelaySec=3600
Persistent=true
"""

[[services]]
name = "podman-auto-update.timer"
enabled = true
state = "started"