jahanson/forgejo-ci-runners
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: jahanson:b0b1852357cbd878df9d10936329b1bb4ba47787
Branches Tags
jahanson:main
jahanson:lxc-vm-builder
..
compare: jahanson:e9d9801d205466704d4491bf96076eaff50c9deb
Branches Tags
jahanson:lxc-vm-builder
jahanson:main

6 commits
b0b1852357 ... e9d9801d20

Author SHA1 Message Date
Renovate Bot
e9d9801d20 Lock file maintenance 2024-05-20 13:31:44 +00:00
jahanson
dcac9f2d2f automerge and increase schedule frequency 2024-05-20 08:16:32 -05:00
jahanson
0768c39f9a reference module directly 2024-05-18 11:08:33 -05:00
Joseph Hanson
44e1f71de7 Merge pull request 'Lock file maintenance' (#2) from renovate/lock-file-maintenance into main 
Reviewed-on: #2
 2024-05-18 10:46:46 -05:00
jahanson
03b7dc29d0 Add shell for nix 2024-05-18 10:34:43 -05:00
jahanson
70b7c4f57e Update ignored files 2024-05-18 10:34:25 -05:00
6 changed files with 66 additions and 27 deletions
Show stats Expand all files Collapse all files

1
.envrc
View file

@ -1 +1,2 @@
export SOPS_AGE_KEY_FILE="$(expand_path ./age.key)"
use nix

6
.gitignore vendored
View file

@ -1,3 +1,7 @@
result*
/secrets
age.key
age.key
**/*.tmp.sops.yaml
**/*.sops.tmp.yaml
result
.direnv

42
flake.lock
View file

@ -5,11 +5,11 @@
"nixpkgs": "nixpkgs"
},
"locked": {
"lastModified": 1715872464,
"narHash": "sha256-mkZ3hrPG7d+qL7B6pQcrNfPh2mnQEJR3FHK93qCp6Uk=",
"lastModified": 1716168343,
"narHash": "sha256-82oT27w9smpItZ+PyN2C0PjIwZYbIocwXSM4u1igXuc=",
"owner": "nix-community",
"repo": "disko",
"rev": "5f6dbcce99d60dd77f96dfc66d06bbea149a40e1",
"rev": "6f01b9710bc4d3bf006eb8df928b4b15e0430901",
"type": "github"
},
"original": {
@ -20,11 +20,11 @@
},
"nixpkgs": {
"locked": {
"lastModified": 1715774670,
"narHash": "sha256-iJYnKMtLi5u6hZhJm94cRNSDG5Rz6ZzIkGbhPFtDRm0=",
"lastModified": 1716128955,
"narHash": "sha256-3DNg/PV+X2V7yn8b/fUR2ppakw7D9N4sjVBGk6nDwII=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "b3fcfcfabd01b947a1e4f36622bbffa3985bdac6",
"rev": "f9256de8281f2ccd04985ac5c30d8f69aefadbe8",
"type": "github"
},
"original": {
@ -36,11 +36,11 @@
},
"nixpkgs-stable": {
"locked": {
"lastModified": 1715458492,
"narHash": "sha256-q0OFeZqKQaik2U8wwGDsELEkgoZMK7gvfF6tTXkpsqE=",
"lastModified": 1716061101,
"narHash": "sha256-H0eCta7ahEgloGIwE/ihkyGstOGu+kQwAiHvwVoXaA0=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "8e47858badee5594292921c2668c11004c3b0142",
"rev": "e7cc61784ddf51c81487637b3031a6dd2d6673a2",
"type": "github"
},
"original": {
@ -52,11 +52,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1715787315,
"narHash": "sha256-cYApT0NXJfqBkKcci7D9Kr4CBYZKOQKDYA23q8XNuWg=",
"lastModified": 1716137900,
"narHash": "sha256-sowPU+tLQv8GlqtVtsXioTKeaQvlMz/pefcdwg8MvfM=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "33d1e753c82ffc557b4a585c77de43d4c922ebb5",
"rev": "6c0b7a92c30122196a761b440ac0d46d3d9954f1",
"type": "github"
},
"original": {
@ -68,11 +68,11 @@
},
"nixpkgs_3": {
"locked": {
"lastModified": 1715777523,
"narHash": "sha256-S6g1OWbKXswOMoTssq3aOm4OhxhlKoIwEAXWmU57vts=",
"lastModified": 1716127062,
"narHash": "sha256-2rk8FqB/iQV2d0vQLs684/Tj5PUHaS1sFwG7fng5vXE=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "c029b7f004009923bbfc90bbc31263cd4b08759f",
"rev": "8a2555763c48e2410054de3f52f7310ce3241ec5",
"type": "github"
},
"original": {
@ -98,11 +98,11 @@
"nixpkgs-stable": "nixpkgs-stable"
},
"locked": {
"lastModified": 1715482972,
"narHash": "sha256-y1uMzXNlrVOWYj1YNcsGYLm4TOC2aJrwoUY1NjQs9fM=",
"lastModified": 1716087663,
"narHash": "sha256-zuSAGlx8Qk0OILGCC2GUyZ58/SJ5R3GZdeUNQ6IS0fQ=",
"owner": "Mic92",
"repo": "sops-nix",
"rev": "b6cb5de2ce57acb10ecdaaf9bbd62a5ff24fa02e",
"rev": "0bf1808e70ce80046b0cff821c019df2b19aabf5",
"type": "github"
},
"original": {
@ -116,11 +116,11 @@
"nixpkgs": "nixpkgs_3"
},
"locked": {
"lastModified": 1715820823,
"narHash": "sha256-KN9uvEjgzUA0trQdnnpeJEPA/UhpMlwXexJyiyqkH78=",
"lastModified": 1716166358,
"narHash": "sha256-SmCc4nKUXgYb8bBGJ3+N+l/2MBROue2x9+CyJ2of24w=",
"owner": "numtide",
"repo": "srvos",
"rev": "7a140951a5b5db5c05d359ccd53c3f7bd06f317b",
"rev": "d368bfdc3a409482b92290a105bcacc108a49d24",
"type": "github"
},
"original": {

2
flake.nix
View file

@ -37,7 +37,7 @@
system = "aarch64-linux";
specialArgs = {inherit inputs outputs;};
modules = [
inputs.sops-nix.nixosModules.sops
sops-nix.nixosModules.sops
srvos.nixosModules.hardware-hetzner-cloud
srvos.nixosModules.server
srvos.nixosModules.mixins-systemd-boot

8
renovate.json
View file

@ -6,11 +6,11 @@
"nix": {
"enabled": true
},
"schedule": [
"every weekend"
],
"lockFileMaintenance": {
"enabled": true
"enabled": true,
"automerge": true,
"ignoreTests": true,
"extends": ["schedule:daily"]
}
}

34
shell.nix Normal file
View file

@ -0,0 +1,34 @@
# Shell for bootstrapping flake-enabled nix and home-manager
{ pkgs ? let
# If pkgs is not defined, instantiate nixpkgs from locked commit
lock = (builtins.fromJSON (builtins.readFile ./flake.lock)).nodes.nixpkgs.locked;
nixpkgs = fetchTarball {
url = "https://github.com/nixos/nixpkgs/archive/${lock.rev}.tar.gz";
sha256 = lock.narHash;
};
system = builtins.currentSystem;
overlays = [ ]; # Explicit blank overlay to avoid interference
in
import nixpkgs { inherit system overlays; }
, ...
}:
let
in
pkgs.mkShell {
# Enable experimental features without having to specify the argument
NIX_CONFIG = "experimental-features = nix-command flakes";
nativeBuildInputs = with pkgs; [
nix
home-manager
git
nil
nixpkgs-fmt
go-task
sops
pre-commit
gitleaks
mkdocs
mqttui
];
}