working towards woodpecker

This commit is contained in:
Anish Lakhwara 2022-12-21 21:42:06 +10:00
parent d2252ae1fe
commit 3bea51a834
4 changed files with 17 additions and 4 deletions

View file

@ -19,6 +19,7 @@
../profiles/wallabag
../profiles/finance
# ../profiles/archivebox
../profiles/woodpecker-agent
];
# For some reason this doesn't work in the profile, but does over here??

View file

@ -1,12 +1,15 @@
{ pkgs, config, self, ... }:
{
users.users.woodpecker-runner = {
isSystemUser = true;
group = "woodpecker-runner";
};
users.groups.woodpecker-runner = { };
# Allow the exec runner to write to build with nix
nix.allowedUsers = [ "woodpecker-runner" ];
nix.settings.allowed-users = [ "woodpecker-runner" ];
age.secrets.woodpecker-agent-secret.owner = "woodpecker-runner";
age.secrets.woodpecker-agent-secret.file = "${self}/secrets/woodpecker-agent-secret.age";
systemd.services.woodpecker-runner-exec = {
enable = true;
@ -55,7 +58,7 @@
"/nix/"
];
EnvironmentFile = [
# /run/agenix/woodpecker-agent-secret
/run/agenix/woodpecker-agent-secret
];
ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent";
User = "woodpecker-runner";

View file

@ -25,7 +25,7 @@ in
"telegram-matrix-env.age".publicKeys = [ lituus ];
"wallabag.age".publicKeys = [ mossnet ];
"woodpecker-agent-secret.age".publicKeys = [ lituus helix ];
"woodpecker-agent-secret.age".publicKeys = [ mossnet helix ];
"woodpecker-client-id.age".publicKeys = [ helix ];
"woodpecker-client-secret.age".publicKeys = [ helix ];
"gitea-dbpass.age".publicKeys = [ helix ];

View file

@ -0,0 +1,9 @@
age-encryption.org/v1
-> ssh-ed25519 K2vF/Q SYAkEEvz6aqkzh8r+TgvnwfQNJ3pLxGUcYmHK3DaNhM
ayICZI0Ctmw1AtIReiXx5KXUSz8qZtkRZQx9eNS0z1g
-> ssh-ed25519 kgCrKA Ii00pfHYObHJbBJziVQLUR43s61t0JOTT0YZJ9OaqE0
NUJddte8zIZhrVtSeTU9iq9UW955ANlA6JZm8MQf+P8
-> QrEy[-grease yS' ]r: PIx`w:SK
uaB9Bdjdf3Sy5fL1qQNsfYZhoCRG51MPDfw75A
--- 8jiDkupjnxMlSfXvJQGK4pVFDTuqNbsvHGsqLzDHjQ0
eœT—8Ÿp<EFBFBD>`² øáG®¥Ç<C2A5>t·è÷4ƒòóѯ·Ç2ZŒ<5A>/ +fÝæxb¢TIèÕùnåÏ<C3A5>ú#¶Rº 5±úTíüñ9 åèä4=ÌYÉd¦\aìÔI