jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

single runner
Some checks failed
Weekly NixOS Build & Cache / build-and-cache (push) Failing after 10m43s
Details

Browse Source
This commit is contained in:
Danilo Reyes 2025-11-02 10:10:00 -06:00
parent 14d3e6b1ee
commit 41ced09790
3 changed files with 21 additions and 55 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
modules/nix/gitea-actions-runners/nixos.nix
View File

@ -9,22 +9,40 @@ let
in
{
config = lib.mkIf (cfg.enable && config.my.secureHost) {
users.groups.gitea-runner = { };
users.users.gitea-runner = {
isSystemUser = true;
group = "gitea-runner";
extraGroups = [
"docker"
"podman"
];
};
nix.settings = {
allowed-users = [ "gitea-runner" ];
trusted-users = [ "gitea-runner" ];
};
services.gitea-actions-runner.instances.nixos = {
inherit (cfg) url enable;
name = "${config.networking.hostName}-nixos";
tokenFile = config.sops.secrets.gitea.path;
labels = [
"nix:host"
"nixos:host"
];
hostPackages = builtins.attrValues {
inherit (pkgs)
bash
curl
coreutils
gitMinimal
nix
attic-client
nodejs # Required for GitHub Actions
openssh # Required for SSH git operations
podman
podman-compose
nix
nodejs
openssh
python3
;
};
};

51
modules/nix/gitea-actions-runners/webref.nix
View File

@ -1,51 +0,0 @@
{
lib,
config,
pkgs,
...
}:
let
cfg = config.my.servers.gitea;
in
{
config = lib.mkIf (cfg.enable && config.my.secureHost) {
users.groups.gitea-runner = { };
users.users.gitea-runner = {
isSystemUser = true;
group = "gitea-runner";
extraGroups = [
"docker"
"podman"
];
};
nix.settings = {
allowed-users = [ "gitea-runner" ];
trusted-users = [ "gitea-runner" ];
};
services.gitea-actions-runner.instances.webref = {
inherit (cfg) url enable;
name = "${config.networking.hostName}-nixos";
tokenFile = config.sops.secrets.gitea.path;
labels = [
"nix"
"ubuntu-latest:docker://node:20-bookworm"
"webref"
];
hostPackages = builtins.attrValues {
inherit (pkgs)
bash
coreutils
curl
git
nix
nodejs
python3
postgresql
podman
podman-compose
attic-client
;
};
};
};
}

1
modules/servers/gitea.nix
View File

@ -11,7 +11,6 @@ in
{
imports = [
../nix/gitea-actions-runners/nixos.nix
../nix/gitea-actions-runners/webref.nix
];
options.my.servers.gitea = setup.mkOptions "gitea" "git" 9083;
config = lib.mkIf (cfg.enable && config.my.secureHost) {