ci: init deploy

.woodpecker/deploy.yml

@@ -1,6 +1,6 @@
 when:
-  - branch: ci-test
-  - event: [push]
+  - branch: flake-lock-update
+  - event: [pull_request]
   
 steps:
   attic-push:
@@ -23,5 +23,5 @@ steps:
        mkdir -p .ssh && cd .ssh
        echo "$${SSH_KEY}" > forgejo
        chmod 400 forgejo
-       nix run github:serokell/deploy-rs -- --ssh-opts="-i forgejo -o StrictHostKeyChecking=no" --skip-checks --targets .#arashi .#sakura .#sora .#yuki .#haru .#kaze
+       nix run github:serokell/deploy-rs -- --ssh-opts="-i forgejo -o StrictHostKeyChecking=no" --skip-checks --targets .#arashi .#kariru .#sakura .#sora .#yuki .#haru .#kaze
     secrets: [ssh_key, gh_pat]

hosts/sora/services/traefik.nix

@@ -153,6 +153,13 @@
             tls.certresolver = "production";
             middlewares = "cors-allow-all";
           };
+          woodpecker = {
+            rule = "Host(`ci.flake.sh`)";
+            entrypoints = ["websecure"];
+            service = "woodpecker";
+            tls.domains = [{main = "*.flake.sh";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           forgejo.loadBalancer = {
@@ -173,6 +180,7 @@
           ntfy-sh.loadBalancer.servers = [{url = "http://100.104.42.96:8090";}];
           attic.loadBalancer.servers = [{url = "http://100.104.42.96:8200";}];
           minio.loadBalancer.servers = [{url = "http://100.69.79.81:9005";}];
+          woodpecker.loadBalancer.servers = [{url = "http://100.82.146.40:8200";}];
         };
       };
     };