all repos — nixfiles @ 0d49f28af3fa822d0dbfbe5995b670eb2df470f5

System and user configuration, managed by nix and home-manager

ci: extract to own role

Alin
commit

0d49f28af3fa822d0dbfbe5995b670eb2df470f5

parent

a47e204dcb246daf185b0394bd2b6d0341edffcf

1 file changed, 1 insertion(+), 55 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -33,6 +33,7 @@
../roles/server.nix ../roles/reverse-proxy.nix ../roles/binary-cache.nix + ../roles/ci.nix ../roles/forgejo-runner.nix ../roles/searchix.nix ../settings/services/git-server.nix
@@ -539,19 +540,6 @@ root * /srv/http/files
file_server browse ''; }; - "ci.${domain}" = - let - srv = config.services.laminar; - in - { - extraConfig = '' - reverse_proxy ${srv.settings.bindHTTP} - handle_path /archive/* { - root * ${srv.homeDir}/archive - file_server browse - } - ''; - }; "cal.${domain}" = { extraConfig = let
@@ -830,48 +818,6 @@ mergeConflict = false;
}; }; }; - - systemd.services.laminar.environment = { - NIX_PATH = "nixpkgs=flake:nixpkgs"; - }; - services.laminar = { - enable = true; - path = with pkgs; [ - fish - bash - gnutar - bzip2 - gzip - git - cached-nix-shell - nix - nix-build-uncached - config.programs.ssh.package - config.services.laminar.package - moreutils - flock - just - rsync - go - ]; - settings = { - title = "CI"; - bindHTTP = "[::1]:8002"; - keepRundirs = 1; - archiveURL = "https://ci.${domain}/archive/"; - }; - timers = { - update-flake-nix-packages = { - startAt = "Saturday"; - accuracy = "6 hours"; - reason = "Weekly flake update"; - }; - }; - }; - users.users.laminar = { - homeMode = "770"; - }; - users.groups.laminar.members = [ "caddy" ]; services.ntfy-sh = { enable = true;