Compare commits

..

3 Commits

Author SHA1 Message Date
ca1dd0589d add secret for gitea runner 2024-05-26 22:23:43 -07:00
6fe93764cc fix merge in sops file 2024-05-26 22:21:46 -07:00
f40ded725e first pass at runner for torus 2024-05-26 22:16:00 -07:00
2 changed files with 38 additions and 5 deletions

View File

@ -15,8 +15,39 @@
HTTP_PORT = 3001;
ROOT_URL = "https://git.tstarr.us";
};
#settings.actions = {
# ENABLED = true;
#};
};
sops.secrets = {
"tokens/gitea-runner" = {
sopsFile = ../../secrets/secrets.yaml;
owner = "gitea-runner";
};
};
services.gitea-actions-runner.instances = {
native-runner = {
enable = true;
url = "https://git.tstarr.us";
tokenFile = config.sops.secrets.gitea-runner.path;
name = "native-runner";
labels = [
"native:host"
];
hostPackages = with pkgs; [
bash
coreutils
curl
gawk
gitMinimal
gnused
nodejs-18_x
wget
];
};
};
users.users.gitea-runner = {
createHome = false;
isSystemUser = true;
group = "gitea-runner";
};
users.groups.gitea-runner = {};
}

View File

@ -1,3 +1,5 @@
tokens:
gitea-runner: ENC[AES256_GCM,data:0//gZJ5g/s6Lq8wpAS/+HxMRhpX+rY9y6GT4lq9ZxJXyBgaY7qhg9o8=,iv:H6BcxaNPDIIpTTY4Ercsgl1C8mKFmoySq0p0Q9bmKGM=,tag:jyip2oviMk3LScqrdtB2IA==,type:str]
nextcloud:
password: ENC[AES256_GCM,data:qI3PV8ybqKQ=,iv:aXQyTUQ9twlmMx3j01cfk6gy/1fAfUxjYXs5QXPUTjU=,tag:kY+lM1qGm+8OCKgDnXZwSw==,type:str]
keys:
@ -22,8 +24,8 @@ sops:
ajM3YlJYU21PaHRyaGlUNy84RHN2SE0KAvMFdqnfV0TzfNcBdY7OvRLZrBb9uXSI
3y50yFhYnyXtWKLQFTwjN6S5dLaZgqhaGhEQyNCQxb5RGZJDR6g7Yw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-05-22T04:53:58Z"
mac: ENC[AES256_GCM,data:kFwTfaMijQWWfNMSkDjeVlPXhfrhxfgCgLZDTS4h2ENuNLhQkkUYfHyRaRFAzl+A74XydmAuHTdvl57yuehSkoXSE1NgmkbNVBbBxKB8p/HtFBV3hK0tuTE6E6ZzryI/9C7yPdKmuRIqIftUmdSaGPIU7CduBM+t1v1rhi8aWNg=,iv:HaQ+YUSRgqQSsyzvHGpDuC/Rw2jHJb4KtpvESzTBc8g=,tag:HVr6X67mIRPq038k/MnNkw==,type:str]
lastmodified: "2024-05-27T05:23:19Z"
mac: ENC[AES256_GCM,data:bogEprsuGns0fd/xZXzEYhmLj9XuqENstwz5IUy+lokYC6dT52kC7Fq2deQGIDtmcuWFIQ0LWGQwYDXEbPbZBRut0RK986i9szOLI9UBmrJx17D/o+FpgZb2lktTGes/99ZeRcBTS0WRD3V3DZSNmnVK5xgGJ2Rb76csif4vKmw=,iv:S+PE3htzqslRMv89os+p3fbsaVXUAZwR37nMlYOkL/Q=,tag:Kfqkfshq31pN6edsPgcmOg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1