aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

working towards woodpecker

Browse source
This commit is contained in:
Anish Lakhwara 2022-12-21 21:42:06 +10:00
parent d2252ae1fe
commit 3bea51a834
4 changed files with 17 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/box/default.nix
View file

@ -19,6 +19,7 @@
../profiles/wallabag ../profiles/wallabag
../profiles/finance ../profiles/finance
# ../profiles/archivebox # ../profiles/archivebox
../profiles/woodpecker-agent
]; ];
# For some reason this doesn't work in the profile, but does over here?? # For some reason this doesn't work in the profile, but does over here??

9
hosts/profiles/woodpecker-agent/default.nix
View file

@ -1,12 +1,15 @@
{ pkgs, config, self, ... }:
{ {
users.users.woodpecker-runner = { users.users.woodpecker-runner = {
isSystemUser = true; isSystemUser = true;
group = "woodpecker-runner"; group = "woodpecker-runner";
}; };
users.groups.woodpecker-runner = { }; users.groups.woodpecker-runner = { };
# Allow the exec runner to write to build with nix # Allow the exec runner to write to build with nix
nix.allowedUsers = [ "woodpecker-runner" ]; nix.settings.allowed-users = [ "woodpecker-runner" ];
age.secrets.woodpecker-agent-secret.owner = "woodpecker-runner";
age.secrets.woodpecker-agent-secret.file = "${self}/secrets/woodpecker-agent-secret.age";
systemd.services.woodpecker-runner-exec = { systemd.services.woodpecker-runner-exec = {
enable = true; enable = true;
@ -55,7 +58,7 @@
"/nix/" "/nix/"
]; ];
EnvironmentFile = [ EnvironmentFile = [
# /run/agenix/woodpecker-agent-secret /run/agenix/woodpecker-agent-secret
]; ];
ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent"; ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent";
User = "woodpecker-runner"; User = "woodpecker-runner";

2
secrets/secrets.nix
View file

@ -25,7 +25,7 @@ in
"telegram-matrix-env.age".publicKeys = [ lituus ]; "telegram-matrix-env.age".publicKeys = [ lituus ];
"wallabag.age".publicKeys = [ mossnet ]; "wallabag.age".publicKeys = [ mossnet ];
"woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; "woodpecker-agent-secret.age".publicKeys = [ mossnet helix ];
"woodpecker-client-id.age".publicKeys = [ helix ]; "woodpecker-client-id.age".publicKeys = [ helix ];
"woodpecker-client-secret.age".publicKeys = [ helix ]; "woodpecker-client-secret.age".publicKeys = [ helix ];
"gitea-dbpass.age".publicKeys = [ helix ]; "gitea-dbpass.age".publicKeys = [ helix ];

9
secrets/woodpecker-agent-secret.age Normal file
View file

@ -0,0 +1,9 @@
age-encryption.org/v1
-> ssh-ed25519 K2vF/Q SYAkEEvz6aqkzh8r+TgvnwfQNJ3pLxGUcYmHK3DaNhM
ayICZI0Ctmw1AtIReiXx5KXUSz8qZtkRZQx9eNS0z1g
-> ssh-ed25519 kgCrKA Ii00pfHYObHJbBJziVQLUR43s61t0JOTT0YZJ9OaqE0
NUJddte8zIZhrVtSeTU9iq9UW955ANlA6JZm8MQf+P8
-> QrEy[-grease yS' ]r: PIx`w:SK
uaB9Bdjdf3Sy5fL1qQNsfYZhoCRG51MPDfw75A
--- 8jiDkupjnxMlSfXvJQGK4pVFDTuqNbsvHGsqLzDHjQ0
eœT—8Ÿp<EFBFBD>`² øáG®¥Ç<C2A5>t·è÷‹4ƒòóѯ·Ç2ZŒ<5A>/‚ +fÝæxb¢TIèÕùnåÏ<C3A5>ú’#¶Rº 5±úTíüñ9 åèä4=ÌYÉd¦\aìÔI