tsuki: remove drawio

home/default.nix

@@ -26,6 +26,7 @@
     yt-dlp
     cachix
     nfs-utils
+    dig
   ];
 
   services.gpg-agent = {

hosts/sakura/services/forgejo.nix

@@ -4,6 +4,7 @@
   config,
   ...
 }: {
+  networking.firewall.allowedTCPPorts = [2222];
   services.forgejo = {
     enable = true;
     stateDir = "/var/lib/forgejo";

hosts/tsuki/home.nix

@@ -38,7 +38,6 @@
       rustypaste-cli
       playerctl
       obsidian
-      drawio
       gimp
       cryptomator
       ventoy-bin-full

hosts/yuki/services/forgejo-runners.nix

@@ -6,7 +6,7 @@
   sops.secrets.forgejo-runner-token = {};
   services.gitea-actions-runner = {
     package = pkgs.forgejo-actions-runner;
-    instances.main = {
+    instances.snowflake = {
       settings = {
         container = {
           network = "host";
@@ -14,8 +14,8 @@
       };
       enable = true;
       name = config.networking.hostName;
+      token = config.sops.secrets.forgejo-runner-token.path;
       url = "https://git.flake.sh";
-      token = "gdeEbeUTifa1nK7EfRgBmvm6XRdQE1zZzAatBRSC";
       labels = [
         "debian-latest:docker://node:18-bullseye"
         "ubuntu-latest:docker://node:18-bullseye"

secrets/secrets.yaml

@@ -8,7 +8,7 @@ gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJ
 authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
 authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
 cloudflareddns: ENC[AES256_GCM,data:xow7oaqa3QbMPwggx2zmGvLcKmov7isvLLZKuC6jW/SNjst8kicSQmNhrZw8M/eq8TuqxOT4BqMILQ+I7As2ZCOjSbEBxi1DwU/z47qI,iv:W8UH4kWlh9JyxcGkeuOjRZKqjOHDg9vpzXezHYs1kEg=,tag:YgGk7svEQr9sqLJtKWcHqA==,type:str]
-forgejo-runner-token: ENC[AES256_GCM,data:vv/zMR3qkmSNxA+wnwAzqdc8yNfR+aLMnmncm5lGmq7PhzryNwxDXQ==,iv:HOJMCTAy0C0VMHUAgLJLAZddsTqbM+Alsgo/+BfBNY4=,tag:pIH8SaIdSxvw70rOtbb9yw==,type:str]
+forgejo-runner-token: ENC[AES256_GCM,data:uHwIBG2Ktdhs2nhfbidHSEkv7bwLnWzHZEa01sfnv2oYvtlHdnTXJQ==,iv:IRS+qLbIFl5GXxChogs6yxsUD4MxnjCw2VF3dxCvSnI=,tag:elTaJSO1ex4qrF9Wu8gx2A==,type:str]
 tsauth-sora: ENC[AES256_GCM,data:3jzPB0whb9xHudVl/MhNeCUgjDfzzQpxGJGqfMf2GqEtfEkiynVTLO/TFDt1PorBuUQOjVfxn8c=,iv:5vLHbhY2ZlnsVQbLlu6Hxo32azpfcj6ORAMn3oSdcHY=,tag:zN8qPOSaSMMdJn+zsTXPaA==,type:str]
 tsauth-sakura: ENC[AES256_GCM,data:iN77ArKDnltxrWGCz8bMqMHBAp45oGUk+n5ilAE0tY2rz01PGaCmIgPFSDfNaMphH6gX+AbEd5Y=,iv:k/lBIZW7aKT3u+dgcFnQORah2yHZXAmY+PBv53tM1ao=,tag:9/pebj3D9LURTedqkduoaw==,type:str]
 sops:
@@ -26,8 +26,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-10-07T19:39:53Z"
-    mac: ENC[AES256_GCM,data:a6G3BdrDCsipNgkG3SNijKM2QCPsQEh9TztF3VlrcUX+jdC5UDpDmh9VCnLHh1MsOTgpRCn4ZXc0QVPSZKxsCra3ipDqLuXATHWzfJFmGDiLnderrRzSmy5MuDJKiVO2wKruYhIfj6VHM92mIvay4JwmqTptmD9DP4g/+5kYkrc=,iv:34XFn2sH3bJjO2O/0oIa23rmiyL4hP+FUYlDqVGiOGA=,tag:A3Qv9uzJ6HXlKoVPHZVjwA==,type:str]
+    lastmodified: "2023-10-07T23:06:24Z"
+    mac: ENC[AES256_GCM,data:fQHI7EP2axFgGPFQs5SeTCSH/wdV9753Aaqd1iOf2PAQZX5BnouFI3AHjjyFSe58GUWliQr6D5LAnB1orjeiaq1SdLMAQQgN0ofs5bL0wmALLucbzKK7u14XweI9tbQkd1OaA1VrGGFPRQHBBSjgUyZFWXheNyQfhDApA4WgM3k=,iv:ODfDUUtVKNAm/C6X69gKvJmR47MgMtNI0rJJ3L6q8Og=,tag:vXbuilqInIAvk3LqFunW0A==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.0