diff options
author | Franck <franck@fcuny.net> | 2022-11-07 08:09:25 -0800 |
---|---|---|
committer | Franck <franck@fcuny.net> | 2022-11-07 08:09:25 -0800 |
commit | bb7025da134fef21f4ccafee74a75428b56a27de (patch) | |
tree | 6e0ff5e7b3ee7367d1fedbf57a407040b8b8ec49 /hosts | |
parent | ref(home/git): update mapping for the git-helper (diff) | |
parent | fix(services/drone): enable drone (diff) | |
download | world-bb7025da134fef21f4ccafee74a75428b56a27de.tar.gz |
Merge pull request 'fcuny/ci-drone' (#1) from fcuny/test-woodpecker into main
Reviewed-on: https://git.fcuny.net/fcuny/world/pulls/1
Diffstat (limited to 'hosts')
-rw-r--r-- | hosts/aptos/home.nix | 1 | ||||
-rw-r--r-- | hosts/tahoe/secrets/drone/secrets.age | bin | 0 -> 703 bytes | |||
-rw-r--r-- | hosts/tahoe/secrets/secrets.nix | 5 | ||||
-rw-r--r-- | hosts/tahoe/services.nix | 6 |
4 files changed, 12 insertions, 0 deletions
diff --git a/hosts/aptos/home.nix b/hosts/aptos/home.nix index 2d60b53..2faaa82 100644 --- a/hosts/aptos/home.nix +++ b/hosts/aptos/home.nix @@ -38,6 +38,7 @@ go.enable = true; python.enable = true; rust.enable = true; + drone-cli.enable = true; # web firefox.enable = true; diff --git a/hosts/tahoe/secrets/drone/secrets.age b/hosts/tahoe/secrets/drone/secrets.age new file mode 100644 index 0000000..c0eb97b --- /dev/null +++ b/hosts/tahoe/secrets/drone/secrets.age Binary files differdiff --git a/hosts/tahoe/secrets/secrets.nix b/hosts/tahoe/secrets/secrets.nix index 390f2b6..7b9500f 100644 --- a/hosts/tahoe/secrets/secrets.nix +++ b/hosts/tahoe/secrets/secrets.nix @@ -22,6 +22,11 @@ in mode = "0440"; }; + "drone/secrets.age" = { + publicKeys = all; + owner = "drone"; + }; + "buildkite/graphql.age" = { publicKeys = all; owner = "buildkite-agent-builder-1"; diff --git a/hosts/tahoe/services.nix b/hosts/tahoe/services.nix index f7edfa4..e5f53ab 100644 --- a/hosts/tahoe/services.nix +++ b/hosts/tahoe/services.nix @@ -20,6 +20,12 @@ in enable = true; stateDir = "/var/lib/gitea"; }; + drone = { + enable = true; + vhostName = "ci.fcuny.net"; + runners = [ "docker" "exec" ]; + sharedSecretFile = secrets."drone/secrets".path; + }; prometheus = { enable = true; }; grafana = { enable = true; |