all repos — nixfiles @ f9b82614b7ddeb2b0a4bb042fb31099f33475010

System and user configuration, managed by nix and home-manager

setup forgejo-actions-runner for codeberg.org/opia

Alan Pearce
commit

f9b82614b7ddeb2b0a4bb042fb31099f33475010

parent

d352d26245724f00684bebc224625a0abb1e4ea3

3 files changed, 20 insertions(+), 0 deletions(-)

changed files
A secrets/forgejo-actions-runner.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 cvV2sw XKZLjxT9jlo2albAn81lM/iC69Co+OMTALzv1uXH6VA
+sWg1ldS3i28T0D5UpH0wchF/8X3PkZIbiVIAk2tyLmY
+-> piv-p256 VBDKjg AhRVOeJFSt6eGiiO8H17tAmRGFxwl+e5NahdxjeHNs3b
+2YM65Sa/GF0zgqWB/6usw6SkcgmuYpOjXN4R/NW8TEY
+--- wkYVALAtHq3snwebTdfDX3s3MGlTspOPqK+8IB6U2SI
+tۍqNqz=<?L\~ZIMG}uUP6'9aTQ.%h=T`4ˁ+
M secrets/secrets.nix → secrets/secrets.nix
@@ -17,6 +17,7 @@ redis-website = [ linde ];
 
     rauthy = [ linde ];
     binarycache = [ linde ];
+    forgejo-actions-runner = [ linde ];
     paperless = [ linde ];
     powerdns = [ linde ];
     dex = [ linde ];
M system/linde.nix → system/linde.nix
@@ -47,6 +47,7 @@ powerdns.file = ../secrets/powerdns.age;
     redis-website.file = ../secrets/redis-website.age;
     cifs-paperless.file = ../secrets/cifs-paperless.age;
     cifs-transmission.file = ../secrets/cifs-transmission.age;
+    forgejo-actions-runner.file = ../secrets/forgejo-actions-runner.age;
     golink = let golink = config.services.golink; in {
       # hope this doesn't collide...
       path = "${golink.dataDir}/.config/tsnet-golink/auth.key";

@@ -1163,6 +1164,17 @@ users.users.laminar = {
     homeMode = "770";
   };
   users.groups.laminar.members = [ "caddy" ];
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.linde = {
+      name = "linde";
+      enable = true;
+      url = "https://codeberg.org";
+      tokenFile = config.age.secrets.forgejo-actions-runner.path;
+      labels = [ "private" ];
+    };
+  };
 
   virtualisation.containers = {
     enable = true;