teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

flora-6: init drone docker runner

Browse source
This commit is contained in:
teutat3s 2023-01-28 23:50:31 +01:00
parent 90b182e499
commit 7a7ff7b1df
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
1 changed files with 36 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

52
hosts/flora-6/drone.nix
View file

@ -1,10 +1,10 @@
{ config
, lib
, pkgs
, self
, ...
}:
{
config,
lib,
pkgs,
self,
...
}: {
age.secrets.drone-secrets = {
file = "${self}/secrets/drone-secrets.age";
mode = "600";
@ -25,20 +25,18 @@
isSystemUser = true;
};
users.groups.drone = { };
users.groups.drone = {};
systemd.tmpfiles.rules = [
"d '/var/lib/drone-db' 0750 drone drone - -"
];
system.activationScripts.mkDroneNet =
let
docker = config.virtualisation.oci-containers.backend;
dockerBin = "${pkgs.${docker}}/bin/${docker}";
in
''
${dockerBin} network inspect drone-net >/dev/null 2>&1 || ${dockerBin} network create drone-net --subnet 172.20.0.0/24
'';
system.activationScripts.mkDroneNet = let
docker = config.virtualisation.oci-containers.backend;
dockerBin = "${pkgs.${docker}}/bin/${docker}";
in ''
${dockerBin} network inspect drone-net >/dev/null 2>&1 || ${dockerBin} network create drone-net --subnet 172.20.0.0/24
'';
virtualisation = {
docker = {
@ -68,7 +66,7 @@
ports = [
"4000:80"
];
dependsOn = [ "drone-db" ];
dependsOn = ["drone-db"];
extraOptions = [
"--network=drone-net"
];
@ -82,6 +80,28 @@
config.age.secrets.drone-secrets.path
];
};
containers."drone-docker-runner" = {
image = "drone/drone-runner-docker:1";
autoStart = true;
# needs to run as root
#user = "994";
volumes = [
"/var/run/docker.sock:/var/run/docker.sock"
];
dependsOn = ["drone-db"];
extraOptions = [
"--network=drone-net"
];
environment = {
DRONE_SERVER_HOST = "ci.pub.solar";
DRONE_SERVER_PROTO = "https";
DRONE_RUNNER_CAPACITY = "2";
DRONE_RUNNER_NAME = "flora-6-docker-runner";
};
environmentFiles = [
config.age.secrets.drone-secrets.path
];
};
};
};
}