jahanson/forgejo-ci-runners
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: jahanson:b7d1252ef814d73e5c664ce236ae94c25eb8c5fe
Branches Tags
jahanson:main
jahanson:lxc-vm-builder
..
compare: jahanson:5729a3d1e339fd032aa0446e87fc13e36b4fc520
Branches Tags
jahanson:lxc-vm-builder
jahanson:main

No commits in common. "b7d1252ef814d73e5c664ce236ae94c25eb8c5fe" and "5729a3d1e339fd032aa0446e87fc13e36b4fc520" have entirely different histories.
b7d1252ef8 ... 5729a3d1e3

2 changed files with 4 additions and 18 deletions
Show stats Expand all files Collapse all files

15
agents/fj-shadowfax-x86_64.nix
View file

@ -14,19 +14,12 @@
];
sops.secrets."forgejo-runner-token" = {
# configure secret for the gitea/forgejo runner.
# configure secret for forwarding rules
sopsFile = ./secrets.sops.yaml;
mode = "0444";
restartUnits = [ "gitea-runner-default.service" ];
};
sops.secrets."cachix/agent_auth_tokens/fj-shadowfax-x86_64" = {
# configure secret for cachix deploy agent.
sopsFile = ./secrets.sops.yaml;
mode = "0444";
restartUnits = [ "cachix-agent.service" ];
};
nix.settings.trusted-users = [ "gitea-runner" ];
users.users.jahanson = {
isNormalUser = true;
@ -62,11 +55,5 @@
];
};
};
services.cachix-agent = {
enable = true;
credentialsFile = config.sops.secrets."cachix/agent_auth_tokens/fj-shadowfax-x86_64".path;
};
system.stateVersion = "24.05";
}

7
agents/secrets.sops.yaml
View file

@ -1,7 +1,6 @@
forgejo-runner-token: ENC[AES256_GCM,data:Sp9rTX+D+PA2kyYpYJLwkXVlmhmAedbQf0r5RGZYaLcWIK8GfWXJkBt/oYMgmQ==,iv:u16wUSl+gbmI+oWB1xfmvhiRP4TxThH6VI5hKhAMOf0=,tag:BcetaNT41N4TWQViRLe5pw==,type:str]
cachix:
agent_auth_tokens:
fj-shadowfax-x86_64: ENC[AES256_GCM,data:zRVf/3VNeQUb029ZMOeQfWMHQvhoMCI3YiNOEZNQ65yXot+J729FInt1IK/MLH9Q3caOE5UXnZ5p9j114c9FlxXDk50PqFGzw6mTLcOzgpKcM5gIjyNZMXdh+sb1sZRUFpeHf/XuGVil9SxlAW09YyP2rsgSYgM7b6YqKe8BvowU6jJ9iGtKdFus9aC0UztC4YUnxHfBjFypGoWwgbODRTd7p1yrSM4I,iv:T18tNm/imVbdN/7y4ejwyFsVnGix1q0xm/Z92yOkzIw=,tag:FCoR3LBO8P+EzPnghFkOCw==,type:str]
auth_token: ENC[AES256_GCM,data:n3jORLJwIJ75SASbvsx12SNpVoF4NDtUZ/bPqpmByhzES8WbALVrfpZU98IHntb5UmnyEJjwTy3wjkrdEbMcOIuDvZudh8DLtLWKIvD0Dke0cNlxAY8s/eIsH9Xt6sDctiD23u1hyhugCFC6RJ6VjEGBRWEyISz04tY1xhoBiT11kAG5hj6a9ThTBcF4adqMNm5QFIc=,iv:mQsMX+Z0lT3Dm7Z9DytQtulV88GqChOo3G4y5bZ4NlM=,tag:gyKt0Ojp2c8B0Nr1vILvaw==,type:str]
sops:
kms: []
gcp_kms: []
@ -44,8 +43,8 @@ sops:
TC9NN3NwNXFPM0RMbmk3NkZBWkpvdUkKvvcdKDCEIo6763hjv5Qlb782jfrDN6wh
lFfbRNuM9p6KjEIcD4wGcGCngPz3L5BtKqyOpCz62apiJk2fo+ztrA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2024-06-18T22:46:02Z"
mac: ENC[AES256_GCM,data:MQaw97FRt83O7VocQywJPXuOtmJl0txwlOiUL5OsMw6huuxyeOpoNBJEoBaEImMWfOYwXh/OjrFVNV64+LEFPtG9op9R72yQZPJJiSly8IDsC61lZSqSKAevSo6b7fGdQn97AdCMRDnHBdfQuwRXLCMK3t24mnD8TJjrgVhXvAE=,iv:GbCl5s5af3/EZr/s3P5ZfRZGxFYW+4luUeLbyDt10WY=,tag:DyiFwppDpD9cpLA56Df16A==,type:str]
lastmodified: "2024-05-26T17:18:50Z"
mac: ENC[AES256_GCM,data:oNN2RMBxnz3I+A7eg7+DT5NY3Cfd3GUcuG6DLmecc2NDCHJJY9Lh0A4GzcvsJu9X/gq7damHScei1cIxQhmV321y204EOJIbrj7JIp+wgwGhFHj/25/CXaSSM8KK+x3sXGUL2GKm64RMrZUdYqIu7X8sWig43dQTaxIARydRs5k=,iv:4i2w/OyEU0Qz6nobu4/H7MXWFb0piOnefEEtTXTRKPg=,tag:htpF2Ny+Pu0/mTL74asLKw==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1