modules/system/common: github-runner module

This commit is contained in:
Nikodem Rabuliński 2024-02-10 21:40:13 +01:00
parent 0d51bd1aa8
commit 1d4a0a82d3
4 changed files with 77 additions and 28 deletions

View file

@ -8,7 +8,6 @@
imports = [
"${modulesPath}/profiles/qemu-guest.nix"
./disks.nix
./github-runner.nix
];
nixpkgs.hostPlatform = "aarch64-linux";
@ -21,6 +20,10 @@
common.hercules.enable = true;
services.hercules-ci-agent.settings.concurrentTasks = 6;
common.github-runner = {
enable = true;
runners.settei.url = "https://github.com/nrabulinski/settei";
};
services.nginx = {
enable = true;

View file

@ -1,27 +0,0 @@
{config, ...}: let
github-runner-user = "github-runner";
in {
age.secrets.github-token = {
file = ../../secrets/github-token.age;
owner = github-runner-user;
};
services.github-runners.settei = {
enable = true;
tokenFile = config.age.secrets.github-token.path;
url = "https://github.com/nrabulinski/settei";
ephemeral = true;
user = github-runner-user;
serviceOverrides = {
DynamicUser = false;
};
};
users = {
users.${github-runner-user} = {
isSystemUser = true;
group = github-runner-user;
};
groups.${github-runner-user} = {};
};
}