diff options
| -rw-r--r-- | hosts/sagittarius/sops.nix | 1 | ||||
| -rw-r--r-- | hosts/sagittarius/web/git.nix | 19 | ||||
| -rw-r--r-- | secrets/sagittarius.yaml | 5 |
3 files changed, 22 insertions, 3 deletions
diff --git a/hosts/sagittarius/sops.nix b/hosts/sagittarius/sops.nix index 08839f8..4f3cfb4 100644 --- a/hosts/sagittarius/sops.nix +++ b/hosts/sagittarius/sops.nix @@ -5,6 +5,7 @@ defaultSopsFile = ../../secrets/sagittarius.yaml; secrets = { "sorre-forgejo-access-token" = { }; + "forgejo-runner-token" = { }; }; }; } diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix index b352952..6fc6490 100644 --- a/hosts/sagittarius/web/git.nix +++ b/hosts/sagittarius/web/git.nix @@ -1,4 +1,4 @@ -{ config, ... }: +{ pkgs, config, ... }: let cfg = config.services.forgejo; srv = cfg.settings.server; @@ -35,4 +35,21 @@ in }; }; }; + + services.gitea-actions-runner = { + package = pkgs.forgejo-actions-runner; + instances.default = { + enable = true; + name = "monolith"; + url = "https://git.sorre.xyz"; + tokenFile = config.sops.secrets."forgejo-runner-token".path; + + labels = [ + "ubuntu-latest:docker://node:16-bullseye" + "ubuntu-22.04:docker://node:16-bullseye" + "ubuntu-20.04:docker://node:16-bullseye" + "ubuntu-18.04:docker://node:16-buster" + ]; + }; + }; } diff --git a/secrets/sagittarius.yaml b/secrets/sagittarius.yaml index 0f9b886..59da4ef 100644 --- a/secrets/sagittarius.yaml +++ b/secrets/sagittarius.yaml @@ -1,4 +1,5 @@ sorre-forgejo-access-token: ENC[AES256_GCM,data:NiSfs2ftFx0ZgiEX0U3CFtlQn3+n115Ao64mNBQ8wKZhwO3NYXf22A==,iv:pdk3JPl9eqWRyNM9sbd8UxPYc4Kn6+r6s9ofv9r8Ynw=,tag:Ytm7SkmAwLTVzZjEdP2/mw==,type:str] +forgejo-runner-token: ENC[AES256_GCM,data:lZAhZiA0DAuWZOI/Z/4TSlwch3MBOlW/GwF08YXPuFuOQqea3m8WSA==,iv:ijD/4mdTlP89hLuLvzwrr8nX30TRNihZTBcLaD4qqng=,tag:Etl3NQx0JMSnFRi4wH1M1A==,type:str] sops: kms: [] gcp_kms: [] @@ -41,8 +42,8 @@ sops: MVRWc3RjdGFmL0Z6Q2hpVWdRMmlNdmcKBii4ptQOfJHrPy7rmgJX7vsR2bzuXBAN X9YJmYU6G/Ft4epJ1TMADvp/4fdwB48u2jQx4cKUimNVJgStt1NA8Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-08-02T23:06:43Z" - mac: ENC[AES256_GCM,data:3V53/RKUs9thrgMr6C0yQTrMp63N7WSd8Yh77HahpIRpVJulSy2+jT4kYISnxVqiHMu/LyVQACLqop+rm5TPHGTlu2G0bri+ZGIcfNmZp5e/LtQAJAjar5+Rgu1Ed7fZ2w7FKGvM0VIVr9lWKx69MVEusVE0kfZWfBac2eOuJuY=,iv:5eNR9CNI1rn19K6iW26gAo8ihmIgbflMt44tNR7inuM=,tag:gplVDG8dmRFY3NkBvSiYFw==,type:str] + lastmodified: "2024-08-12T09:55:34Z" + mac: ENC[AES256_GCM,data:Z0sheK4FjHU49QKSTE8tfFbAo/6+gf5DloskrK7JIvMygrV73kpnxWTdr1J3GkGoFaUmtc2GPMTWZyoUN1SmvFa3imIu5UNcCeWkQAUnV9VkciasSTd8CT2GshdZetuQYLnspxfvgOe6jHcoeL5kgqNfg5iajjFO0mB0+fJzdcA=,iv:dEvqV/k2SW/A92yXwHy8asm5dJ5U6e4NnJ4VwXRs7d8=,tag:riJXj2dyPb/21kvYSfos5Q==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.0 |