felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2025-08-12 08:19:32 +02:00
Code Issues Projects Releases Wiki Activity

lupine: add runner token for all runners

Browse Source
This commit is contained in:
h7x4 2025-08-03 02:37:13 +02:00
parent 8dcd471a6f
commit 7cf1c0b6e7
No known key found for this signature in database
GPG Key ID: 9F2F7D8250F35146
2 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/lupine/services/gitea-runner.nix
View File

@ -6,16 +6,14 @@
# successfully registered will gitea give you the next token. # successfully registered will gitea give you the next token.
# - oysteikt Sep 2023 # - oysteikt Sep 2023
sops = { sops = {
secrets."gitea/runners/token" = { secrets."gitea/runners/token" = { };
key = "gitea/runners/${lupineName}";
};
templates."gitea-runner-envfile" = { templates."gitea-runner-envfile" = {
restartUnits = [ restartUnits = [
"gitea-runner-${lupineName}.service" "gitea-runner-${lupineName}.service"
]; ];
content = '' content = ''
TOKEN="${config.sops.placeholder."gitea/runners/token"}" TOKEN=${config.sops.placeholder."gitea/runners/token"}
''; '';
}; };
}; };
@ -41,5 +39,5 @@
networking.dhcpcd.IPv6rs = false; networking.dhcpcd.IPv6rs = false;
networking.firewall.interfaces."podman+".allowedUDPPorts = [53 5353]; networking.firewall.interfaces."podman+".allowedUDPPorts = [ 53 5353 ];
} }

10
secrets/lupine/lupine.yaml
View File

@ -1,10 +1,6 @@
gitea: gitea:
runners: runners:
lupine-1: ENC[AES256_GCM,data:UcZB2p/dInvcl0yNBEohzbmcVxg/QQPXlIsaVB3M3hyxFg1gtGfUGA==,iv:OigyPfPoRIjvyiId7hiiWdNrZqyZqI3OonvJC+zYEzI=,tag:SjBsvo/IJKhFQs+PiI596g==,type:str] token: ENC[AES256_GCM,data:Y27trzUHuA1k9fVs/3PM/L8aIlI+37nAPTVDgWjBX+K4q23saa5XUA==,iv:J4litvX0ip/a340E7S+XHZQG+BGh+K/RzFxdS1VLwA0=,tag:H4oK4vn27U+yXqa/YQJOxA==,type:str]
lupine-2: null
lupine-3: null
lupine-4: null
lupine-5: null
sops: sops:
age: age:
- recipient: age1fkrypl6fu4ldsa7te4g3v4qsegnk7sd6qhkquuwzh04vguy96qus08902e - recipient: age1fkrypl6fu4ldsa7te4g3v4qsegnk7sd6qhkquuwzh04vguy96qus08902e
@ -97,8 +93,8 @@ sops:
YU5mMDlRckJCMDAzcHYyMWN1clRJRVEK77PiAQP+2+WblGYEgAf6bx6RTh0JHiSZ YU5mMDlRckJCMDAzcHYyMWN1clRJRVEK77PiAQP+2+WblGYEgAf6bx6RTh0JHiSZ
/jPIN/rbAKNv36wpZDbuLV8tcMuvhleNMRSSqbIloLSzww+Z5nOU4A== /jPIN/rbAKNv36wpZDbuLV8tcMuvhleNMRSSqbIloLSzww+Z5nOU4A==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-07-30T18:29:08Z" lastmodified: "2025-08-03T01:13:50Z"
mac: ENC[AES256_GCM,data:47cki5ucPTVd4JuEyK0QkDCCEqj1pW6SA5I6ihC/MEja6TIuHTcEPFpje8+LvpGjpP9uobKX4g3UcyvkJ63j/k3hU0xPYQX3Z1ee00KIMKB0GHNjUR8ENtnwd3TU7kp5ohtXeCtcyzCjdFFuXp8AINGv3vpbU2MzauctUxn5B1Y=,iv:1mpk/f1QlRtHfA9dqyNLBrvfVPgtLnZ7ibj8qNrEGD8=,tag:drEK1+qeJy97rgeQJyqucA==,type:str] mac: ENC[AES256_GCM,data:oFbwmbLk3z6oYQMCEcFAGstf6DUT7hh9OUa5HVyeIR15YVgJ9/0hwZPG1m00w1HpKjt7/iVnQQYdPvt00snwn7g0M822MquMbwavozOrWWuhpxlzjM1kn/zTHAPFMmDihAciuQSSk43Dc5FRS5Gc6gwonEsJ5EUqcq2nM/cnAUY=,iv:H1CEaaypKUMCd2zJOXhIUQQqTfOwknG+iBOpgYlirmY=,tag:gKX+OTZ+BrHvcwoyO6YFdA==,type:str]
pgp: pgp:
- created_at: "2025-07-30T18:27:50Z" - created_at: "2025-07-30T18:27:50Z"
enc: |- enc: |-