Merge pull request 'ci: init deploy' (#25) from deploy-test into master
Reviewed-on: #25
This commit is contained in:
commit
d23e8b10b6
2 changed files with 35 additions and 0 deletions
27
.woodpecker/deploy.yml
Normal file
27
.woodpecker/deploy.yml
Normal file
|
@ -0,0 +1,27 @@
|
||||||
|
when:
|
||||||
|
- branch: flake-lock-update
|
||||||
|
- event: [pull_request]
|
||||||
|
|
||||||
|
steps:
|
||||||
|
attic-push:
|
||||||
|
image: git.vdx.hu/voidcontext/woodpecker-plugin-nix-attic
|
||||||
|
settings:
|
||||||
|
binary_cache: https://cache.flake.sh/
|
||||||
|
binary_cache_public_key: kyasshu:g1heIgCgG7M4San6nRsz/omcVQ1GTc7+zKKm3L9Co7o=
|
||||||
|
binary_cache_token:
|
||||||
|
from_secret: kyasshu_access_token
|
||||||
|
script: |
|
||||||
|
attic login kyasshu $PLUGIN_BINARY_CACHE_TOKEN
|
||||||
|
deploy:
|
||||||
|
image: nixos/nix
|
||||||
|
commands: |
|
||||||
|
echo 'experimental-features = flakes nix-command' >> /etc/nix/nix.conf
|
||||||
|
echo "access-tokens = github.com=$${GH_PAT}" >> /etc/nix/nix.conf
|
||||||
|
echo 'builders-use-substitutes = true' >> /etc/nix/nix.conf
|
||||||
|
echo 'substituters = https://cache.flake.sh/kyasshu https://hyprland.cachix.org https://cache.nixos.org https://nix-gaming.cachix.org https://anyrun.cachix.org https://viperml.cachix.org https://nix-community.cachix.org https://cache.nixos.org/' >> /etc/nix/nix.conf
|
||||||
|
echo 'trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= kyasshu:g1heIgCgG7M4San6nRsz/omcVQ1GTc7+zKKm3L9Co7o= hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4= anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s= viperml.cachix.org-1:qZhKBMTfmcLL+OG6fj/hzsMEedgKvZVFRRAhq7j8Vh8= nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=' >> /etc/nix/nix.conf
|
||||||
|
mkdir -p .ssh && cd .ssh
|
||||||
|
echo "$${SSH_KEY}" > forgejo
|
||||||
|
chmod 400 forgejo
|
||||||
|
nix run github:serokell/deploy-rs -- --ssh-opts="-i forgejo -o StrictHostKeyChecking=no" --skip-checks --targets .#arashi .#kariru .#sakura .#sora .#yuki .#haru .#kaze
|
||||||
|
secrets: [ssh_key, gh_pat]
|
|
@ -153,6 +153,13 @@
|
||||||
tls.certresolver = "production";
|
tls.certresolver = "production";
|
||||||
middlewares = "cors-allow-all";
|
middlewares = "cors-allow-all";
|
||||||
};
|
};
|
||||||
|
woodpecker = {
|
||||||
|
rule = "Host(`ci.flake.sh`)";
|
||||||
|
entrypoints = ["websecure"];
|
||||||
|
service = "woodpecker";
|
||||||
|
tls.domains = [{main = "*.flake.sh";}];
|
||||||
|
tls.certresolver = "production";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
services = {
|
services = {
|
||||||
forgejo.loadBalancer = {
|
forgejo.loadBalancer = {
|
||||||
|
@ -173,6 +180,7 @@
|
||||||
ntfy-sh.loadBalancer.servers = [{url = "http://100.104.42.96:8090";}];
|
ntfy-sh.loadBalancer.servers = [{url = "http://100.104.42.96:8090";}];
|
||||||
attic.loadBalancer.servers = [{url = "http://100.104.42.96:8200";}];
|
attic.loadBalancer.servers = [{url = "http://100.104.42.96:8200";}];
|
||||||
minio.loadBalancer.servers = [{url = "http://100.69.79.81:9005";}];
|
minio.loadBalancer.servers = [{url = "http://100.69.79.81:9005";}];
|
||||||
|
woodpecker.loadBalancer.servers = [{url = "http://100.82.146.40:8200";}];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue