From b31bfdb272c9a54bb31a2c301ee2bd6af6388abc Mon Sep 17 00:00:00 2001
From: Hermes-Neo <hermes-neo@noreply.localhost>
Date: Sat, 18 Jul 2026 04:10:25 +0100
Subject: [PATCH] feat: add system-containers sync for rootful quadlets

---
 modules/common/podman.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/modules/common/podman.nix b/modules/common/podman.nix
index 40f7269..0f44f92 100644
--- a/modules/common/podman.nix
+++ b/modules/common/podman.nix
@@ -2,7 +2,7 @@
 {
   virtualisation.podman.enable = true;
 
-  # Sync everything in ./containers/ to the containers user's quadlet directory
+  # User containers (rootless, as the containers user)
   system.activationScripts.containers-quadlets = {
     text = ''
       mkdir -p /var/lib/containers/.config/containers/systemd
@@ -11,4 +11,13 @@
     '';
     deps = [ "users" ];
   };
+
+  # System containers (rootful, can bind low ports like 80/443)
+  system.activationScripts.system-containers-quadlets = {
+    text = ''
+      mkdir -p /etc/containers/systemd
+      cp -r ${./system-containers}/* /etc/containers/systemd/
+    '';
+    deps = [ "users" ];
+  };
 }