notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:6ab024a2c5b91c7a3ed05c444d60f2d46bb64139
Branches Tags
notohh:master
..
compare: notohh:5ce837b4057ecf311edf4420cefce0caa1c0ef4b
Branches Tags
notohh:master

2 commits
6ab024a2c5 ... 5ce837b405

Author SHA1 Message Date
notohh
5ce837b405
forgejo-runners: recreate nix-garden runner
All checks were successful
flake check / check (push) Successful in 8m30s
fmt check / check (push) Successful in 1m4s
 2023-12-30 21:33:42 -05:00
notohh
68fb54f5ae
sops: update secrets 2023-12-30 21:33:13 -05:00
2 changed files with 12 additions and 8 deletions
Show stats Expand all files Collapse all files

13
hosts/tsuru/services/forgejo-runners.nix
View file

@ -3,8 +3,11 @@
config,
...
}: {
sops.secrets.snowflake-runner-token = {};
sops.secrets.basegbot-runner-token = {};
sops.secrets = {
snowflake-runner-token = {};
basegbot-runner-token = {};
nixgarden-runner-token = {};
};
services.gitea-actions-runner = {
package = pkgs.forgejo-actions-runner;
instances.snowflake = {
@ -53,7 +56,7 @@
gitMinimal
];
};
instances.nixgarden = {
instances.nix-garden = {
settings = {
container = {
network = "host";
@ -61,7 +64,7 @@
};
enable = true;
name = config.networking.hostName;
token = "ufM3x5MANdcIg9qb7LTJrC7dAi9Kw6DmVXDDX3HL";
token = config.sops.secrets.nixgarden-runner-token.path;
url = "https://git.flake.sh";
labels = [
"debian-latest:docker://node:18-bullseye"
@ -74,8 +77,6 @@
coreutils
wget
gitMinimal
python3
python311Packages.pip
];
};
};

7
secrets/secrets.yaml
View file

@ -3,6 +3,8 @@ foundry-password: ENC[AES256_GCM,data:c6cO1vV/thC7U1ha/1FiVVzk0KtvUnTRgJ9ysyO35u
cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str]
rusty-auth-token: ENC[AES256_GCM,data:FZ1bC6wijkHPII2AlYnDq9P6pFq2qWVo,iv:92ZH8N52sml8ZkvfuXf472Jj/JbnaWfy38AX6GTvszA=,tag:Suq7P86MhjUx0WmPuGpCUA==,type:str]
restic-repo-pwd: ENC[AES256_GCM,data:wan4U/w6417NWnbTTe7ID4y6Dv+bs0D3Fvw9ur6gIdU=,iv:4B5ihL5/QiNObqZwLwo4Sd33zx4pqRWszdzdutvK6a0=,tag:KqU5sSpPG8n6qHxxJUpDTg==,type:str]
restic-repo-pwd-sora: ENC[AES256_GCM,data:Uehs6DdpjqEk46MmchPyNnxr0Zkdo4ciavb4S/BqZmg=,iv:SCnmy2kNOpOndgRdQzkugEnwi6ZvvdOGu/Kc5yqp8Oo=,tag:AZKRBvD0EGpFAveyw8SQNQ==,type:str]
sora-b2: ENC[AES256_GCM,data:gMDRRKjPi8bPK3qT9DnXgFHfeg3WvZ5yX2jZncGDkeNB/XSLDTSJpYoBCFj9MnNCxTRZgFhgjucC3A7fnGqy4iBFM/w6LOiZQFLpx5veTzZ71chOWQlbcsE=,iv:1JsZ8uP/SW84LEOF4oMb0ALujtQ+arXrY2KqTwe1fcQ=,tag:trSF9smv+ASyIs5wHkVsRg==,type:str]
gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
@ -10,6 +12,7 @@ tsauth-sora: ENC[AES256_GCM,data:3jzPB0whb9xHudVl/MhNeCUgjDfzzQpxGJGqfMf2GqEtfEk
tsauth-sakura: ENC[AES256_GCM,data:iN77ArKDnltxrWGCz8bMqMHBAp45oGUk+n5ilAE0tY2rz01PGaCmIgPFSDfNaMphH6gX+AbEd5Y=,iv:k/lBIZW7aKT3u+dgcFnQORah2yHZXAmY+PBv53tM1ao=,tag:9/pebj3D9LURTedqkduoaw==,type:str]
snowflake-runner-token: ENC[AES256_GCM,data:CYtnZeCCd3IbNq95xCAoftYRxYf5QdZk1cw2PgRQMkBBc2kVkBpluQ==,iv:zoUvBD0QYk3rZytVjKZ8qizLxiBdzkRnTowXUULgMZY=,tag:J5vg+ipkcPKUSmbCq0Yoiw==,type:str]
basegbot-runner-token: ENC[AES256_GCM,data:US3VkT2+S9sKPJ7zPNNBudV/884/cNfmEZVdmWHnL4WWdvUej5aIbQ==,iv:mEjU7DF4NCX7WwLP4+CxlV3aKZOkL7t6wyM4Mz7sPrg=,tag:JrMiiQ2TT3OET4iyO6pUog==,type:str]
nixgarden-runner-token: ENC[AES256_GCM,data:3XxAKiWHxFLicQPebYwBhqL+fMft8iCkikyveIb9O++X1YuygNFRLw==,iv:DT58z4RvmVQth/4VubcMIT55CyGk1/3j5s7IQ/9Bw8s=,tag:oXDNZPTQ02Ybe9pqN5zHow==,type:str]
searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9UKJM34t82o2J5K69RcOSBL7HadqmxcT4Eh8e8ZUJnquD7rrPdWb2Ih4zS7MmG94=,iv:wrQNNU7CjzfePNe1tWEXmN30vC0jTp+PtgfI3/XH22g=,tag:QAt/QL846hLLIMLQZUM3mQ==,type:str]
neko-admin: ENC[AES256_GCM,data:E5goYrVyM2uQ1WLLHdcOzqX8gGO5EXJRqCRtaqAjrbUAeFRDU8A=,iv:Osh2SCeFYIvossZZ1NZH0xMrfhTcYAa6nssJhhmNNP0=,tag:m7shoTDw+Cya6Cg50yWaZg==,type:str]
smtp2go-pwd: ENC[AES256_GCM,data:03OCDnG73T8B2Q3TJLt1kg==,iv:QFI34ZoM88AuGvOwVmxsplkNKWFgwqBn1AFdHNREses=,tag:9YABs0nAh7Cx2vybuIW9sA==,type:str]
@ -28,8 +31,8 @@ sops:
YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-12-30T16:22:09Z"
mac: ENC[AES256_GCM,data:LV5mRsqxzOTGcmoTZRjfAw5713AbDvWWngcnmAJtCTNjWbFsnIuNwd452i0SHkHsV0czR1BemmHzHYIp+ZCUZGBYDQcBJjCMsYUdLGzNGAZeImc38C3pXK2Vu0WSIdHmECch21HEw0L8OI07v7MToCy4OS2ITm0OAXGFo0el0xI=,iv:k5/mDqkRsnyOdFjb+EPm782DEx4HdXUt3mb3tkYGp18=,tag:Flckc72wh4qM0t+OEfjDqg==,type:str]
lastmodified: "2023-12-31T02:30:15Z"
mac: ENC[AES256_GCM,data:gX/e2Ga0Lgce4SJkzshHXL9TqdqWswnTDOwtcKWRlqD2OrKAr7x9bgAr22vOus/1lAVubRerVAxlDALAsjIvb3eTkYQAxckZcrrG1Kv7HnbVuEpdoKSaLXK2pEECYsgf6kLztMO+smsBJ7cl5huKb6en7URWBh+jY6AdtNE1yIw=,iv:pxHajG4alWe967a10K4qVk1gfc//bmZFvOCX8rlRXF4=,tag:Lqkrm+ajeJNHJVhq8AWKcw==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1