albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Add forgejo runner

Browse source
This commit is contained in:
iFargle 2023-12-06 14:47:34 +09:00
parent c8fa845e5d
commit 5b7759cfb0
2 changed files with 17 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
nixos/common/services/forgejo-runner.nix Normal file
View file

@ -0,0 +1,14 @@
{ pkgs, config, hostname, ... }: {
sops.secrets."secrets/forgejo_token" = {
owner = "root";
sopsFile = ../../../secrets/secrets.yaml;
};
services.gitea-actions-runner.instances."${hostname}" = {
enable = true;
name = "${hostname}";
labels = "nixos";
url = "https://git.sysctl.io";
tokenFile = "/run/secrets/secrets/forgejo_token";
};
}

4
nixos/hosts/framework-server/default.nix
View file

@ -6,6 +6,7 @@
./disks.nix
../../common/modules/secureboot.nix
../../common/services/fwupd.nix
../../common/services/forgejo-runner.nix
./builder.nix
./ssh-luks.nix
./docker.nix
@ -55,7 +56,8 @@
# Forward mail port 25 to sysctl.io / linode
networking.firewall.extraCommands = ''
iptables -t nat -A OUTPUT -p tcp --dport 25 -j DNAT --to-destination 10.100.0.1:25
ip route add table 25 0.0.0.0/0 dev wireguard0
ip route add table 25 default via 10.100.0.2
'';
boot.initrd.services.udev.rules = ''