CCCHH/nix-infra
CCCHH/nix-infra
2
3
Fork 2
Code Issues 1 Pull requests 1 Wiki Activity

Switch the forgejo-actions-runners secret mngmt from colmena to sops-nix

Browse source
This commit is contained in:
June 2024-05-26 02:50:08 +02:00
commit 361ccac69f
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0
6 changed files with 265 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

16
config/hosts/forgejo-actions-runner/forgejo-actions-runner.nix
View file

@ -12,19 +12,15 @@
enable = true;
name = "Global Docker Forgejo Actions Runner";
url = "https://git.hamburg.ccc.de/";
tokenFile = "/secrets/registration-token.secret";
tokenFile = "/run/secrets/forgejo_actions_runner_registration_token";
labels = [ "docker:docker://node:current-bookworm" ];
};
};
deployment.keys = {
"registration-token.secret" = {
keyCommand = [ "pass" "noc/services/forgejo-actions-runner/registration_token" ];
destDir = "/secrets";
user = "gitea-runner";
group = "gitea-runner";
permissions = "0640";
uploadAt = "pre-activation";
};
sops.secrets."forgejo_actions_runner_registration_token" = {
mode = "0440";
owner = "root";
group = "root";
restartUnits = [ "gitea-runner-ccchh\\x2dforgejo\\x2dglobal\\x2ddocker.service" ];
};
}