Snipe-IT¶

Containers site-snipeit (docker.io/snipe/snipe-it, Apache :80) +

db-snipeit (mariadb:11) on net-snipeit. Data volume app-snipeit-data

at /var/lib/snipeit (uploads, backups, OAuth keys) — app code is in the

image. Secrets: snipeit-db-root-password, snipeit-db-password,

snipeit-app-key.

Key env (behind NPM): APP_URL=https://assets.mdsdefense.com,

APP_FORCE_TLS=true, APP_TRUSTED_PROXIES=*, SECURE_COOKIES=true,

DB_HOST=db-snipeit, APP_KEY from secret. APP_KEY must never change

— it encrypts fields in the DB; back the secret up with the DB.

# generate APP_KEY once (before first start)
podman run --rm docker.io/snipe/snipe-it:latest php artisan key:generate --show
printf '%s' 'base64:...' | podman secret create snipeit-app-key -

# first start runs migrations; watch it
podman logs -f site-snipeit

# artisan inside the container
podman exec -it site-snipeit php artisan about
podman exec -it site-snipeit php artisan snipeit:backup
podman exec -it site-snipeit php artisan config:clear   # after env changes + restart

# DB (same MariaDB recipe as WordPress)
podman exec -it db-snipeit sh -c 'mariadb -uroot -p"$MYSQL_ROOT_PASSWORD"'
podman exec db-snipeit sh -c 'mariadb-dump -uroot -p"$MYSQL_ROOT_PASSWORD" snipeit' > ~/tmp/snipeit-$(date +%F).sql

Upgrade: pin the image tag in the unit (podman image inspect … --format '{{index .Labels "org.opencontainers.image.version"}}'), dump the DB, change

the tag, daemon-reload, restart — migrations run on start.

Source: dmz-web-podman-cheatsheet.md v1.1.1 in the dmz-web-deploy repo (Releases). Edit the wiki and the repo copy together.