b12f/os
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Update drone runner secrets

Browse source
This commit is contained in:
Benjamin Bädorf 2023-02-02 23:37:40 +01:00
parent a97bf09324
commit c434d1769f
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
2 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
hosts/chocolatebar/chocolatebar.nix
View file

@ -26,6 +26,17 @@ in {
pub-solar.core.hibernation.resumeDevice = "/dev/dm-0"; pub-solar.core.hibernation.resumeDevice = "/dev/dm-0";
pub-solar.core.hibernation.resumeOffset = 115075072; pub-solar.core.hibernation.resumeOffset = 115075072;
age.secrets."drone-runner-exec-config" = {
file = "${self}/secrets/drone-runner-exec-config";
mode = "400";
owner = psCfg.user.name;
};
pub-solar.docker-ci-runner = {
enable = true;
runnerVarsFile = config.age.secrets.drone-runner-exec-config.path;
};
services.openssh.openFirewall = true; services.openssh.openFirewall = true;
networking.firewall.allowedTCPPorts = networking.firewall.allowedTCPPorts =
[443] [443]
@ -54,7 +65,6 @@ in {
owner = psCfg.user.name; owner = psCfg.user.name;
}; };
pub-solar.sway.vnc.enable = true; pub-solar.sway.vnc.enable = true;
pub-solar.ci-runner.enable = true;
home-manager.users."${psCfg.user.name}" = { home-manager.users."${psCfg.user.name}" = {
xdg.configFile = mkIf psCfg.sway.enable { xdg.configFile = mkIf psCfg.sway.enable {

BIN
secrets/drone-runner-exec-config
View file

Binary file not shown.