FYI I run with rootless podman inside a systemd service. Using actually podlet. Posting some notes I have. Although had to do some tinkering with nginx configuration because using another reverse proxy. There was another thread about using a separate reverse proxy with TLS where I say what options I changed. This is for version 11, not yet upgraded to 12.
/etc/containers/systemd/users/1005/mariadb.container:
[Unit]
Description=MariaDB
[Container]
Image=docker.io/library/mariadb:11-ubi9
ContainerName=mariadb
Environment=MARIADB_RANDOM_ROOT_PASSWORD=1
AutoUpdate=registry
PublishPort=3306:3306
Volume=/media/whatever/mariadb/data:/var/lib/mysql:Z
Volume=/media/whaterver/mariadb/conf.d:/etc/mysql/conf.d:Z
Network=seafile
[Install]
WantedBy=multi-user.target default.target
[Service]
TimeoutStartSec=900
Restart=always
as_the_container_user: systemctl --user daemon-reload
# Seafile installation
# https://manual.seafile.com/docker/deploy_seafile_with_docker
as_the_container_user: mkdir /media/somemount/containers_services_data/seafile
as_the_container_user: chmod 755 /media/somemount/containers_services_data/seafile
as_the_container_user: chcon system_u:object_r:container_file_t:s0:c440,c512 /media/somemount/containers_services_data/seafile
as_the_container_user: podlet compose seafile-compose.yml # edit result
; /etc/containers/systemd/users/1005/seafile-memcached.container
[Container]
ContainerName=seafile-memcached
Exec=-m 256
Network=seafile
NetworkAlias=memcached
Image=docker.io/library/memcached:1.6.18
[Service]
TimeoutStartSec=900
Restart=always
; /etc/containers/systemd/users/1005/seafile.container
[Unit]
Requires=mariadb.service seafile-memcached.service
After=mariadb.service seafile-memcached.service
[Container]
ContainerName=seafile
Environment=HTTPS_INSECURE=true DB_HOST=mariadb DB_ROOT_PASSWD=DELETE_ME TIME_ZONE=Etc/UTC SEAFILE_ADMIN_EMAIL=my-cool-email-address@duck.com SEAFILE_ADMIN_PASSWORD=DELETE_ME SEAFILE_SERVER_LETSENCRYPT=false SEAFILE_SERVER_HOSTNAME=seafile.mydomainname.com
Image=docker.io/seafileltd/seafile-mc:11.0-latest
Network=seafile,podman
#AddHost=acme-v02.api.letsencrypt.org:172.65.46.172 # option not supported yet, ip of acme staging server
PodmanArgs=--add-host acme-v02.api.letsencrypt.org:172.65.46.172
AutoUpdate=registry
StopTimeout=900
PublishPort=8101:80
SecurityLabelLevel=s0:c440,c512
Volume=/media/somemount/containers_services_data/seafile:/shared
[Install]
WantedBy=multi-user.target default.target
[Service]
TimeoutStartSec=900
TimeoutStopSec=950
Restart=always
ExecStartPre=rm -r /media/somemount/containers_services_data/seafile/seafile/conf/__pycache__/