From 73bbcffb506159c26967790516176ebac4303fa0 Mon Sep 17 00:00:00 2001
From: Hermes-Neo <hermes-neo@noreply.localhost>
Date: Sat, 18 Jul 2026 04:05:21 +0100
Subject: [PATCH] feat: declare user quadlet files via NixOS tmpfiles

---
 modules/common/podman.nix | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/modules/common/podman.nix b/modules/common/podman.nix
index 26fc17c..fe904ef 100644
--- a/modules/common/podman.nix
+++ b/modules/common/podman.nix
@@ -1,8 +1,29 @@
 { config, lib, pkgs, ... }:
+
+let
+  nginxQuadlet = pkgs.writeText "nginx-example.container" ''
+    [Container]
+    Image=nginx:latest
+    PublishPort=9999:80
+
+    [Service]
+    Restart=always
+
+    [Install]
+    WantedBy=default.target
+  '';
+in
 {
   virtualisation.podman = {
     enable = true;
-    # Rootless containers by default
-    # Quadlet files in ~/.config/containers/systemd/ are auto-detected
+    # Rootless containers via user quadlets
   };
+
+  # Write quadlet files into the containers user's config directory
+  systemd.tmpfiles.rules = [
+    "d /var/lib/containers/.config 0755 containers containers -"
+    "d /var/lib/containers/.config/containers 0755 containers containers -"
+    "d /var/lib/containers/.config/containers/systemd 0755 containers containers -"
+    "L+ /var/lib/containers/.config/containers/systemd/nginx-example.container - - - - ${nginxQuadlet}"
+  ];
 }