(T)im's N(ix) Flake, Multi-Host Configurations for all of my machines!
74k1.sh/
nixos
nix
feat(forgejo): add runners & mailer
+47
-29
+30
-21
modules/nixos/daemons/forgejo/default.nix
+30
-21
modules/nixos/daemons/forgejo/default.nix
···
1
1
{ inputs, outputs, config, lib, pkgs, allSecrets, ... }:
2
2
{
3
3
age.secrets."forgejo_runner_token" = {
4
-
rekeyFile = "${inputs.self}/secrets/forgejo_runer_token.age";
5
-
mode = "770";
6
-
owner = "forgejo";
7
-
group = "forgejo";
4
+
rekeyFile = "${inputs.self}/secrets/forgejo_runner_token.age";
5
+
# mode = "770";
6
+
# owner = "forgejo";
7
+
# group = "forgejo";
8
8
};
9
9
# Git Server
10
10
services = {
···
28
28
BUILTIN_SSH_SERVER_USER = "forge";
29
29
SSH_LISTEN_PORT = 2277;
30
30
};
31
+
mailer = {
32
+
ENABLED = true;
33
+
PROTOCOL = "smtp+starttls";
34
+
SMTP_ADDR = allSecrets.global.mail.sender.host;
35
+
SMTP_PORT = allSecrets.global.mail.sender.port;
36
+
USER = allSecrets.global.mail.sender.username;
37
+
PASSWD = allSecrets.global.mail.sender.password;
38
+
FROM = "\"[SYSTEM] Forgejo\"<${allSecrets.global.mail.sender.username}>";
39
+
};
31
40
actions = {
32
41
ENABLED = true;
33
42
DEFAULT_ACTIONS_URL = "github";
···
39
48
};
40
49
openssh.settings.AcceptEnv = "GIT_PROTOCOL";
41
50
# Runner
42
-
# gitea-actions-runner = {
43
-
# package = pkgs.forgejo-actions-runner;
44
-
# instances.default = {
45
-
# enable = true;
46
-
# name = "monolith";
47
-
# url = "https://git.${allSecrets.global.domain0}";
48
-
# #tokenFile = "/tmp/forgejo-runner-token";
49
-
# tokenFile = config.age.secrets."forgejo_runner_token".path;
50
-
# labels = [
51
-
# "ubuntu-latest:docker://node:16-bullseye"
52
-
# "ubuntu-22.04:docker://node:16-bullseye"
53
-
# "ubuntu-20.04:docker://node:16-bullseye"
54
-
# "ubuntu-18.04:docker://node:16-buster"
55
-
# # "native:host"
56
-
# ];
57
-
# };
58
-
# };
51
+
gitea-actions-runner = {
52
+
package = pkgs.forgejo-actions-runner;
53
+
instances.default = {
54
+
enable = true;
55
+
name = "monolith";
56
+
url = "https://git.${allSecrets.global.domain0}";
57
+
#tokenFile = "/tmp/forgejo-runner-token";
58
+
tokenFile = config.age.secrets."forgejo_runner_token".path;
59
+
labels = [
60
+
"ubuntu-latest:docker://node:16-bullseye"
61
+
"ubuntu-22.04:docker://node:16-bullseye"
62
+
"ubuntu-20.04:docker://node:16-bullseye"
63
+
"ubuntu-18.04:docker://node:16-buster"
64
+
# "native:host"
65
+
];
66
+
};
67
+
};
59
68
};
60
69
61
70
}
secrets/forgejo_runer_token.age
secrets/forgejo_runer_token.age
This is a binary file and will not be displayed.
+10
secrets/forgejo_runner_token.age
+10
secrets/forgejo_runner_token.age
···
1
+
age-encryption.org/v1
2
+
-> piv-p256 RRcsTA AvDBucVebW50NJkFKTmF6cgIU6NIW8VtNjwT0fIVJmJ/
3
+
nk6ZrYO0EbWwPxl3h/OdhzyvQwSsdDt/5iHyowZUeEc
4
+
-> piv-p256 IBLnbw AzYbPKfPJN7MH8ONJFEDnVABlsn+E85wf7XYZYS+DqZ+
5
+
hyhnSyRZiPzGXy+YQu1fm559hFcTgYaSh/9mZ37HBzQ
6
+
-> 4--grease vV:H^5@ i7# <kj%4Gi =pA
7
+
h8Q+cyJJHhKLovsDMremvVE6xG9J0MP9yjznduCAgAxoipfz1aAm6T6sPLFyKKqP
8
+
9muHAvUqbxDJ0v2I/fI4Q6yPlnkaeNvxmwB6U23wkU1vWak6g8w
9
+
--- UEqMI8vnnmagxl7VtWh06ntKCxsblrtVZEzrcGM7b0o
10
+
6���-�S� �0�@�W �`�8�I��� ��-V���$����>�� �8�� ���݆E�ud$�{m@m��~�7�/�(
-8
secrets/rekeyed/eiri/2f03543b6be947c06c708477fdc95b00-forgejo_runner_token.age
-8
secrets/rekeyed/eiri/2f03543b6be947c06c708477fdc95b00-forgejo_runner_token.age
···
1
-
age-encryption.org/v1
2
-
-> ssh-ed25519 z3ZzUw C1w2EHKIGep/QBZ8PYsy/ihHdcU1Syg+Jr75z358Glc
3
-
+vVF8rYQZBdWv5lOArbaLSa7UYhBHn5bYxvsyFgsxts
4
-
-> @PK"-grease #/pq )tw t+"Bpf
5
-
Fqubpn66ZnJ2yax0ZDwry0hvlb1WXca1K9MybR0QpSr0LJUSjmXvoxjHphGr/UZy
6
-
pXG/y7IcCia+2u2r76cYgDdhJKc
7
-
--- VWCTbJ3CFwKQ+UcV2V5PzpQp3Oo6UGChjCPBvUbpBUk
8
-
�J�Sxb�[�CO�1��1�g� (�z��i���Ɉb�iz�$ ����r�?"�:�1�^��&.[S���:����
+7
secrets/rekeyed/eiri/f25d099dfd2f3cf390f216f546c00ee5-forgejo_runner_token.age
+7
secrets/rekeyed/eiri/f25d099dfd2f3cf390f216f546c00ee5-forgejo_runner_token.age
···
1
+
age-encryption.org/v1
2
+
-> ssh-ed25519 z3ZzUw AWYkXWk8hij3UIX80wo4A97AtHuiC+FUL98wauYgJlE
3
+
x1lfP7uyKnPSEF2Xt9XlxAE9i5zGd1yl00PuoUaW3/E
4
+
-> Ff+-grease O
5
+
YpSHGtWTcXd8rmNFxAXiCXgpX016cjoxud5gAV0pNRpgBFGxyTjSaioV8lwy
6
+
--- fGImBiNVX9GTRy9Y5hNlzaJubu1Cfm/qFgdd4i0zqmE
7
+
�1^xO������[9��|� �3Qg�f5�� 0�n��!!a|8�4ؗ2�;���s�U��SJb㵲��r��/(�
secrets/secrets.nix.age
secrets/secrets.nix.age
This is a binary file and will not be displayed.