all repos — nixfiles @ 9674e97dfb7f70ef055c4e47c01897bbeee7ead0

System and user configuration, managed by nix and home-manager

add staging nixos configuration to serve as CI runner

Alin
commit

9674e97dfb7f70ef055c4e47c01897bbeee7ead0

parent

2147243a2c57644c346ae119cb2f9550ea9a568d

2 files changed, 59 insertions(+), 0 deletions(-)

changed files
M flake.nix → flake.nix
@@ -158,6 +158,30 @@ ./packages/modules/nixos/laminar.nix
           ./system/hosts/smrk.nix
         ];
       };
+      nixosConfigurations.staging = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        specialArgs = { inherit inputs; };
+        modules = [
+          srvos.nixosModules.server
+          vpsadminos.nixosConfigurations.containerUnstable
+          agenix.nixosModules.default
+          ./packages/modules/nixos/laminar.nix
+          ./system/roles/server.nix
+          ./system/roles/ci-runner.nix
+          (
+            {
+              config,
+              pkgs,
+              lib,
+              ...
+            }:
+            {
+              system.stateVersion = "25.11";
+              nix.settings.max-jobs = 4;
+            }
+          )
+        ];
+      };
       darwinConfigurations.marvin = darwin.lib.darwinSystem {
         system = "aarch64-darwin";
         modules = [
A system/roles/ci-runner.nix
@@ -0,0 +1,35 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+{
+  users.groups.laminar = { };
+  users.users.laminar = {
+    group = "laminar";
+    home = "/var/lib/laminar";
+    createHome = true;
+    isSystemUser = true;
+    packages = with pkgs; [
+      fish
+      bash
+      gnutar
+      bzip2
+      gzip
+      config.programs.git.package
+      cached-nix-shell
+      nix
+      nix-build-uncached
+      config.programs.ssh.package
+      laminar
+      moreutils
+      flock
+      just
+      rsync
+      go
+    ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHeFYWByDp3lurxzYbQPiMJfHcFEDUdj3TAu5ib2Sv1A laminar@smrk.alin.ovh"
+    ];
+  };
+}