working towards woodpecker
This commit is contained in:
		
							parent
							
								
									d2252ae1fe
								
							
						
					
					
						commit
						3bea51a834
					
				|  | @ -19,6 +19,7 @@ | ||||||
|     ../profiles/wallabag |     ../profiles/wallabag | ||||||
|     ../profiles/finance |     ../profiles/finance | ||||||
|     # ../profiles/archivebox |     # ../profiles/archivebox | ||||||
|  |     ../profiles/woodpecker-agent | ||||||
|   ]; |   ]; | ||||||
| 
 | 
 | ||||||
|   # For some reason this doesn't work in the profile, but does over here?? |   # For some reason this doesn't work in the profile, but does over here?? | ||||||
|  |  | ||||||
|  | @ -1,12 +1,15 @@ | ||||||
|  | { pkgs, config, self, ... }: | ||||||
| { | { | ||||||
| 
 |  | ||||||
|   users.users.woodpecker-runner = { |   users.users.woodpecker-runner = { | ||||||
|     isSystemUser = true; |     isSystemUser = true; | ||||||
|     group = "woodpecker-runner"; |     group = "woodpecker-runner"; | ||||||
|   }; |   }; | ||||||
|   users.groups.woodpecker-runner = { }; |   users.groups.woodpecker-runner = { }; | ||||||
|   # Allow the exec runner to write to build with nix |   # Allow the exec runner to write to build with nix | ||||||
|   nix.allowedUsers = [ "woodpecker-runner" ]; |   nix.settings.allowed-users = [ "woodpecker-runner" ]; | ||||||
|  | 
 | ||||||
|  |   age.secrets.woodpecker-agent-secret.owner = "woodpecker-runner"; | ||||||
|  |   age.secrets.woodpecker-agent-secret.file = "${self}/secrets/woodpecker-agent-secret.age"; | ||||||
| 
 | 
 | ||||||
|   systemd.services.woodpecker-runner-exec = { |   systemd.services.woodpecker-runner-exec = { | ||||||
|     enable = true; |     enable = true; | ||||||
|  | @ -55,7 +58,7 @@ | ||||||
|         "/nix/" |         "/nix/" | ||||||
|       ]; |       ]; | ||||||
|       EnvironmentFile = [ |       EnvironmentFile = [ | ||||||
|         # /run/agenix/woodpecker-agent-secret |         /run/agenix/woodpecker-agent-secret | ||||||
|       ]; |       ]; | ||||||
|       ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent"; |       ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent"; | ||||||
|       User = "woodpecker-runner"; |       User = "woodpecker-runner"; | ||||||
|  |  | ||||||
|  | @ -25,7 +25,7 @@ in | ||||||
|   "telegram-matrix-env.age".publicKeys = [ lituus ]; |   "telegram-matrix-env.age".publicKeys = [ lituus ]; | ||||||
| 
 | 
 | ||||||
|   "wallabag.age".publicKeys = [ mossnet ]; |   "wallabag.age".publicKeys = [ mossnet ]; | ||||||
|   "woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; |   "woodpecker-agent-secret.age".publicKeys = [ mossnet helix ]; | ||||||
|   "woodpecker-client-id.age".publicKeys = [ helix ]; |   "woodpecker-client-id.age".publicKeys = [ helix ]; | ||||||
|   "woodpecker-client-secret.age".publicKeys = [ helix ]; |   "woodpecker-client-secret.age".publicKeys = [ helix ]; | ||||||
|   "gitea-dbpass.age".publicKeys = [ helix ]; |   "gitea-dbpass.age".publicKeys = [ helix ]; | ||||||
|  |  | ||||||
							
								
								
									
										9
									
								
								secrets/woodpecker-agent-secret.age
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										9
									
								
								secrets/woodpecker-agent-secret.age
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,9 @@ | ||||||
|  | age-encryption.org/v1 | ||||||
|  | -> ssh-ed25519 K2vF/Q SYAkEEvz6aqkzh8r+TgvnwfQNJ3pLxGUcYmHK3DaNhM | ||||||
|  | ayICZI0Ctmw1AtIReiXx5KXUSz8qZtkRZQx9eNS0z1g | ||||||
|  | -> ssh-ed25519 kgCrKA Ii00pfHYObHJbBJziVQLUR43s61t0JOTT0YZJ9OaqE0 | ||||||
|  | NUJddte8zIZhrVtSeTU9iq9UW955ANlA6JZm8MQf+P8 | ||||||
|  | -> QrEy[-grease yS' ]r: PIx`w:SK | ||||||
|  | uaB9Bdjdf3Sy5fL1qQNsfYZhoCRG51MPDfw75A | ||||||
|  | --- 8jiDkupjnxMlSfXvJQGK4pVFDTuqNbsvHGsqLzDHjQ0 | ||||||
|  | eœT—8Ÿp<EFBFBD>`²	øáG®¥Ç<C2A5>t·è÷‹4ƒòóѯ·Ç2ZŒ<5A>/‚ +fÝæxb¢TIèÕùnåÏ<C3A5>ú’#¶Rº5±úTíüñ9	åèä4=ÌYÉd¦\aìÔI | ||||||
		Loading…
	
		Reference in a new issue