notohh/snowflake
notohh/snowflake
1
0
Fork 0
Code Issues Pull requests Projects 1 Releases Packages Wiki Activity

Compare commits

base: notohh:cff47bc3e6c5e6f64f3af815ddea7e86d3b3121e
Branches Tags
notohh:master
..
compare: notohh:49bc52b2df8d01515849ea452604958defcef6c0
Branches Tags
notohh:master

No commits in common. "cff47bc3e6c5e6f64f3af815ddea7e86d3b3121e" and "49bc52b2df8d01515849ea452604958defcef6c0" have entirely different histories.
cff47bc3e6 ... 49bc52b2df

2 changed files with 45 additions and 2 deletions
Show stats Expand all files Collapse all files

38
hosts/sakura/services/woodpecker.nix Normal file
View file

@ -0,0 +1,38 @@
{config, ...}: {
sops.secrets.woodpecker-server = {};
sops.secrets.woodpecker-agent-secret = {};
services.woodpecker-server = {
enable = true;
environment = {
WOODPECKER_SERVER_ADDR = ":8200";
WOODPECKER_GRPC_ADDR = ":8300";
WOODPECKER_HOST = "https://ci.flake.sh";
WOODPECKER_OPEN = "false";
WOODPECKER_GITEA = "true";
WOODPECKER_GITEA_URL = "https://git.flake.sh";
WOODPECKER_ADMIN = "notohh";
WOODPECKER_AGENT_SECRET = config.sops.secrets.woodpecker-agent-secret.path;
WOODPECKER_LOG_LEVEL = "debug";
WOODPECKER_DEBUG_PRETTY = "true";
WOODPECKER_KEEPALIVE_MIN_TIME = "10s";
};
environmentFile = config.sops.secrets.woodpecker-server.path;
};
services.woodpecker-agents.agents.nix = {
enable = true;
environment = {
DOCKER_HOST = "unix:///var/run/docker.sock";
WOODPECKER_BACKEND = "docker";
WOODPECKER_SERVER = "localhost:8300";
WOODPECKER_AGENT_SECRET = config.sops.secrets.woodpecker-agent-secret.path;
WOODPECKER_LOG_LEVEL = "debug";
WOODPECKER_DEBUG_PRETTY = "true";
WOODPECKER_KEEPALIVE_MIN_TIME = "10s";
WOODPECKER_HEALTHCHECK = "true";
};
extraGroups = [
"docker"
];
};
}

9
secrets/secrets.yaml
View file

@ -3,8 +3,13 @@ foundry-password: ENC[AES256_GCM,data:c6cO1vV/thC7U1ha/1FiVVzk0KtvUnTRgJ9ysyO35u
cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str] cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str]
rusty-auth-token: ENC[AES256_GCM,data:FZ1bC6wijkHPII2AlYnDq9P6pFq2qWVo,iv:92ZH8N52sml8ZkvfuXf472Jj/JbnaWfy38AX6GTvszA=,tag:Suq7P86MhjUx0WmPuGpCUA==,type:str] rusty-auth-token: ENC[AES256_GCM,data:FZ1bC6wijkHPII2AlYnDq9P6pFq2qWVo,iv:92ZH8N52sml8ZkvfuXf472Jj/JbnaWfy38AX6GTvszA=,tag:Suq7P86MhjUx0WmPuGpCUA==,type:str]
restic-repo-pwd: ENC[AES256_GCM,data:wan4U/w6417NWnbTTe7ID4y6Dv+bs0D3Fvw9ur6gIdU=,iv:4B5ihL5/QiNObqZwLwo4Sd33zx4pqRWszdzdutvK6a0=,tag:KqU5sSpPG8n6qHxxJUpDTg==,type:str] restic-repo-pwd: ENC[AES256_GCM,data:wan4U/w6417NWnbTTe7ID4y6Dv+bs0D3Fvw9ur6gIdU=,iv:4B5ihL5/QiNObqZwLwo4Sd33zx4pqRWszdzdutvK6a0=,tag:KqU5sSpPG8n6qHxxJUpDTg==,type:str]
woodpecker-server: ENC[AES256_GCM,data:EqsNkoy4NRzDeMmhawox42EdaoWRf+BLWHKRHfVZL5RfdjaRYs8esCxCF7ivxgG08Qt+6Tl/eTT089fg2+nNLdpdstwW778CeT50s8fRoLt7552XCCivRFjPH05SKkVpFgx2GMsEkb//e2zivWVzCWxXvgQzJYAX2XI8JrEpvU33KNjc6i+mdNwuvtQCMw==,iv:y6YHTKhfjyGFanZLMh+vHJZe6cLz449fEmXHASgv+eU=,tag:5uvekfmeZT+PeDyJRyBeXA==,type:str]
woodpecker-agent-secret: ENC[AES256_GCM,data:Xfz8OEQqcqeb9zi531zhfitbDbfxtVAsf4JFmmqpAL9rMsQwRl8vWVp3m23yEl6F5f67+Bf26GAlPwWT8hVCAA==,iv:fCoBgR1L1niZaa/HCCfJTsrJvOrlGv0Fa7zcTL6s118=,tag:SOE/4MOp6tx+eTr4vrxxGA==,type:str]
attic-secret: ENC[AES256_GCM,data:RH5ZyG/FqMgWAdNnwMCeP11d/+LxQ//IjIWoGp+Pck2otuUq0TD+IQasonbiz+3tOtyJxmL7Kesov56R8FfKX1yp7OCvyrM+vNH/4lJKjXPtzQCGvmCAlTvWLFmVAu0Vxnfk4yGTnY48GycmlDeSU7ap13IbCqBLpFnyETqV5he7IJlmAS/+uXlo4FVn9T8gP6PRCIEYq7iaf18BV17itzG8XQgSA4nxKvPAqa4i64tmfm0HqZJ3y8XQNq/c32yMBQdrjUuUHklPqAAht0KRqp2UX9dk,iv:kziKIamP6UG0ohht1woqHOf3lIzqt9RC3iGq5N3gwvg=,tag:kFff64ddihlz9ilAB8nrUw==,type:str] attic-secret: ENC[AES256_GCM,data:RH5ZyG/FqMgWAdNnwMCeP11d/+LxQ//IjIWoGp+Pck2otuUq0TD+IQasonbiz+3tOtyJxmL7Kesov56R8FfKX1yp7OCvyrM+vNH/4lJKjXPtzQCGvmCAlTvWLFmVAu0Vxnfk4yGTnY48GycmlDeSU7ap13IbCqBLpFnyETqV5he7IJlmAS/+uXlo4FVn9T8gP6PRCIEYq7iaf18BV17itzG8XQgSA4nxKvPAqa4i64tmfm0HqZJ3y8XQNq/c32yMBQdrjUuUHklPqAAht0KRqp2UX9dk,iv:kziKIamP6UG0ohht1woqHOf3lIzqt9RC3iGq5N3gwvg=,tag:kFff64ddihlz9ilAB8nrUw==,type:str]
s3-keyid: ENC[AES256_GCM,data:66gFMHBA1NlZf+YONJkitOrxSOLKXrisEg==,iv:/geb8Z7Uto1Jk8YT7VE/j6Jp18bvucJ4Ocp135sy5Rg=,tag:riHoznD7aErlF4+CuZB2CQ==,type:str]
s3-secret-key: ENC[AES256_GCM,data:VzFl4foy42gCeY+yLgXSBy0Dj1geOWzI3WrxCfvsnQ==,iv:Hgc7fpI3gBnQEq5wmGb+xlZU4B5KemMlkD02ZTU7HaI=,tag:OGjfv+HxmWGm/j9qRxY+wQ==,type:str]
gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str] gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
miniflux: ENC[AES256_GCM,data:C4kurW7+C62ewPUalvJWnxV/fipCEwFFvkAst13aRAwi0v+R8g9skvW9F9PkSrvkyjAOFaCFKA==,iv:xEG3s9WCpjWFbBqR8dHBlrsf/ItvcdhlP+b9qOo5Wx8=,tag:XmswbqaAJaYElSYwW+V/kw==,type:str]
authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str] authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str] authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
cloudflareddns: ENC[AES256_GCM,data:xow7oaqa3QbMPwggx2zmGvLcKmov7isvLLZKuC6jW/SNjst8kicSQmNhrZw8M/eq8TuqxOT4BqMILQ+I7As2ZCOjSbEBxi1DwU/z47qI,iv:W8UH4kWlh9JyxcGkeuOjRZKqjOHDg9vpzXezHYs1kEg=,tag:YgGk7svEQr9sqLJtKWcHqA==,type:str] cloudflareddns: ENC[AES256_GCM,data:xow7oaqa3QbMPwggx2zmGvLcKmov7isvLLZKuC6jW/SNjst8kicSQmNhrZw8M/eq8TuqxOT4BqMILQ+I7As2ZCOjSbEBxi1DwU/z47qI,iv:W8UH4kWlh9JyxcGkeuOjRZKqjOHDg9vpzXezHYs1kEg=,tag:YgGk7svEQr9sqLJtKWcHqA==,type:str]
@ -24,8 +29,8 @@ sops:
YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ== 5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2023-10-05T20:42:39Z" lastmodified: "2023-10-05T18:49:20Z"
mac: ENC[AES256_GCM,data:bniacC304lHRxyxpVPopWtKu2508fIpp+TmVt+2EJjsPiqV2x6tA377DTiczh+7tjjcEKJQ7UclkRs+8BH095WyYuX7LC6F8HzQY2its1BoMUvBoHo9x0gVTK0lgg01kLTrLFrWP3uv5xcGgj1/huBLfr6tOwvymmyEgORlf/+M=,iv:VJIYUqzflBQ+vXEWinBCPBjnQXH36nYdRehjPnErSBo=,tag:6nBssjqsd0oIpakpw+mFsw==,type:str] mac: ENC[AES256_GCM,data:kREsbUEnGXtF5gsAsYt3OwlIK2EirR6qP5hTHcdiEqtSpfjjYR1ifDEGL3Pdr3it/aceuHXprxf3UcTHlIlmQFp/m7UQdiQVp/nUJnSCcWKNxPUru832rp6T41mQ6iU+Np9rHSUMGhKeUEFUBuIFqVScWG/HmZvti079ZcFRBCQ=,iv:G0mgLbH2WiOQOfRgYFeH5k+FtGaaN4mKvKf/WQB/nZk=,tag:c/WOM52rSTquTfT5hKyxiw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.8.0 version: 3.8.0