diff options
author | Franck Cuny <franck@fcuny.net> | 2022-06-11 13:47:53 -0700 |
---|---|---|
committer | Franck Cuny <franck@fcuny.net> | 2022-06-11 13:49:31 -0700 |
commit | 614fc2fcce0e9ae0bcfdc6e08d3c4bac846d02a8 (patch) | |
tree | b3557983fea7381545b80de64d116db42298ee6b /modules/services/drone/runner-exec | |
parent | ref(gitea): remove all modules for gitea (diff) | |
download | world-614fc2fcce0e9ae0bcfdc6e08d3c4bac846d02a8.tar.gz |
ref(drone): remove all modules and configurations
I do not use drone anymore, no need to keep this around. Change-Id: I8f9564747939a6d1a2b95bcfe8e2c70e46d8bc1e Reviewed-on: https://cl.fcuny.net/c/world/+/411 Tested-by: CI Reviewed-by: Franck Cuny <franck@fcuny.net>
Diffstat (limited to 'modules/services/drone/runner-exec')
-rw-r--r-- | modules/services/drone/runner-exec/default.nix | 55 |
1 files changed, 0 insertions, 55 deletions
diff --git a/modules/services/drone/runner-exec/default.nix b/modules/services/drone/runner-exec/default.nix deleted file mode 100644 index 01cc11b..0000000 --- a/modules/services/drone/runner-exec/default.nix +++ /dev/null @@ -1,55 +0,0 @@ -{ config, lib, pkgs, ... }: -let - cfg = config.my.services.drone; - hasRunner = (name: builtins.elem name cfg.runners); - execPkg = pkgs.drone-runner-exec; -in -{ - config = lib.mkIf (cfg.enable && hasRunner "exec") { - systemd.services.drone-runner-exec = { - wantedBy = [ "multi-user.target" ]; - # might break deployment - restartIfChanged = false; - confinement.enable = true; - confinement.packages = with pkgs; [ git gnutar bash nixUnstable gzip ]; - path = with pkgs; [ git gnutar bash nixUnstable gzip ]; - serviceConfig = { - Environment = [ - "DRONE_SERVER_HOST=${cfg.vhostName}" - "DRONE_SERVER_PROTO=https" - "DRONE_RUNNER_CAPACITY=10" - "CLIENT_DRONE_RPC_HOST=127.0.0.1:${toString cfg.port}" - "NIX_REMOTE=daemon" - "PAGER=cat" - ]; - BindPaths = [ "/nix/var/nix/daemon-socket/socket" ]; - BindReadOnlyPaths = [ - "/etc/resolv.conf:/etc/resolv.conf" - "/etc/resolvconf.conf:/etc/resolvconf.conf" - "/etc/passwd:/etc/passwd" - "/etc/group:/etc/group" - "/nix/var/nix/profiles/system/etc/nix:/etc/nix" - "${ - config.environment.etc."ssl/certs/ca-certificates.crt".source - }:/etc/ssl/certs/ca-certificates.crt" - "${ - config.environment.etc."ssh/ssh_known_hosts".source - }:/etc/ssh/ssh_known_hosts" - "/etc/machine-id" - # channels are dynamic paths in the nix store, therefore we need to bind mount the whole thing - "/nix/" - ]; - EnvironmentFile = [ cfg.sharedSecretFile ]; - ExecStart = "${execPkg}/bin/drone-runner-exec"; - User = "drone-runner-exec"; - Group = "drone-runner-exec"; - }; - }; - - users.users.drone-runner-exec = { - isSystemUser = true; - group = "drone-runner-exec"; - }; - users.groups.drone-runner-exec = { }; - }; -} |