working towards woodpecker
This commit is contained in:
		
							parent
							
								
									d2252ae1fe
								
							
						
					
					
						commit
						3bea51a834
					
				|  | @ -19,6 +19,7 @@ | |||
|     ../profiles/wallabag | ||||
|     ../profiles/finance | ||||
|     # ../profiles/archivebox | ||||
|     ../profiles/woodpecker-agent | ||||
|   ]; | ||||
| 
 | ||||
|   # For some reason this doesn't work in the profile, but does over here?? | ||||
|  |  | |||
|  | @ -1,12 +1,15 @@ | |||
| { pkgs, config, self, ... }: | ||||
| { | ||||
| 
 | ||||
|   users.users.woodpecker-runner = { | ||||
|     isSystemUser = true; | ||||
|     group = "woodpecker-runner"; | ||||
|   }; | ||||
|   users.groups.woodpecker-runner = { }; | ||||
|   # Allow the exec runner to write to build with nix | ||||
|   nix.allowedUsers = [ "woodpecker-runner" ]; | ||||
|   nix.settings.allowed-users = [ "woodpecker-runner" ]; | ||||
| 
 | ||||
|   age.secrets.woodpecker-agent-secret.owner = "woodpecker-runner"; | ||||
|   age.secrets.woodpecker-agent-secret.file = "${self}/secrets/woodpecker-agent-secret.age"; | ||||
| 
 | ||||
|   systemd.services.woodpecker-runner-exec = { | ||||
|     enable = true; | ||||
|  | @ -55,7 +58,7 @@ | |||
|         "/nix/" | ||||
|       ]; | ||||
|       EnvironmentFile = [ | ||||
|         # /run/agenix/woodpecker-agent-secret | ||||
|         /run/agenix/woodpecker-agent-secret | ||||
|       ]; | ||||
|       ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent"; | ||||
|       User = "woodpecker-runner"; | ||||
|  |  | |||
|  | @ -25,7 +25,7 @@ in | |||
|   "telegram-matrix-env.age".publicKeys = [ lituus ]; | ||||
| 
 | ||||
|   "wallabag.age".publicKeys = [ mossnet ]; | ||||
|   "woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; | ||||
|   "woodpecker-agent-secret.age".publicKeys = [ mossnet helix ]; | ||||
|   "woodpecker-client-id.age".publicKeys = [ helix ]; | ||||
|   "woodpecker-client-secret.age".publicKeys = [ helix ]; | ||||
|   "gitea-dbpass.age".publicKeys = [ helix ]; | ||||
|  |  | |||
							
								
								
									
										9
									
								
								secrets/woodpecker-agent-secret.age
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										9
									
								
								secrets/woodpecker-agent-secret.age
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,9 @@ | |||
| age-encryption.org/v1 | ||||
| -> ssh-ed25519 K2vF/Q SYAkEEvz6aqkzh8r+TgvnwfQNJ3pLxGUcYmHK3DaNhM | ||||
| ayICZI0Ctmw1AtIReiXx5KXUSz8qZtkRZQx9eNS0z1g | ||||
| -> ssh-ed25519 kgCrKA Ii00pfHYObHJbBJziVQLUR43s61t0JOTT0YZJ9OaqE0 | ||||
| NUJddte8zIZhrVtSeTU9iq9UW955ANlA6JZm8MQf+P8 | ||||
| -> QrEy[-grease yS' ]r: PIx`w:SK | ||||
| uaB9Bdjdf3Sy5fL1qQNsfYZhoCRG51MPDfw75A | ||||
| --- 8jiDkupjnxMlSfXvJQGK4pVFDTuqNbsvHGsqLzDHjQ0 | ||||
| eœT—8Ÿp<EFBFBD>`²	øáG®¥Ç<C2A5>t·è÷‹4ƒòóѯ·Ç2ZŒ<5A>/‚ +fÝæxb¢TIèÕùnåÏ<C3A5>ú’#¶Rº5±úTíüñ9	åèä4=ÌYÉd¦\aìÔI | ||||
		Loading…
	
		Reference in a new issue