55 lines
925 B
Nix
55 lines
925 B
Nix
{
|
|
config,
|
|
pkgs,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
p = import ../parameters.nix;
|
|
in
|
|
{
|
|
|
|
age.secrets.forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
|
|
|
|
nix.settings = {
|
|
download-buffer-size = 524288000; # 500 MiB
|
|
};
|
|
|
|
my = {
|
|
utils = {
|
|
commons.enable = true;
|
|
lxc-standard.enable = true;
|
|
};
|
|
|
|
services.forgejo-runner = {
|
|
enable = true;
|
|
url = "https://git.${p.domains.public}";
|
|
tokenFile = config.age.secrets.forgejo-runner-token.path;
|
|
name = "nix-runner";
|
|
labels = [
|
|
"nix:host"
|
|
"native:host"
|
|
];
|
|
};
|
|
|
|
virtualisation.proxmox.enable = true;
|
|
};
|
|
|
|
# Extra packages needed for CI operations
|
|
environment.systemPackages = with pkgs; [
|
|
git
|
|
colmena
|
|
jq
|
|
curl
|
|
just
|
|
];
|
|
|
|
# Allow the runner to use nix-daemon
|
|
nix.settings.trusted-users = [
|
|
"root"
|
|
"gitea-runner"
|
|
];
|
|
|
|
system.stateVersion = "25.11";
|
|
}
|
|
|