Redid networking

modules/common.nix

@@ -80,6 +80,26 @@
     defaultNetwork.settings.dns_enabled = true;
   };
 
+  # Create the shared "homey" podman network that all service containers join.
+  # DNS is enabled by default on netavark-backed networks, so containers can
+  # reach each other by container name (e.g. "openldap", "nextcloud-postgres").
+  systemd.services.podman-homey-network = {
+    description = "Create homey podman network";
+    wantedBy    = [ "multi-user.target" ];
+    before      = [ "podman-openldap.service" "podman-authelia.service"
+                    "podman-gitea.service" "podman-nextcloud-postgres.service"
+                    "podman-nextcloud.service" "podman-phpldapadmin.service"
+                    "podman-jellyfin.service" "podman-transmission.service" ];
+    serviceConfig = {
+      Type            = "oneshot";
+      RemainAfterExit = true;
+      ExecStart = pkgs.writeShellScript "create-homey-network" ''
+        ${pkgs.podman}/bin/podman network exists homey \
+          || ${pkgs.podman}/bin/podman network create homey
+      '';
+    };
+  };
+
   # -------------------------------------------------------------------------
   # Core packages available on every host
   # -------------------------------------------------------------------------