mirror of
https://github.com/nmasur/dotfiles
synced 2024-11-10 05:12:56 +00:00
59 lines
1.7 KiB
Nix
59 lines
1.7 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
options.giteaRunner.enable =
|
|
lib.mkEnableOption "Enable Gitea Actions runner.";
|
|
|
|
config = lib.mkIf config.giteaRunner.enable {
|
|
|
|
services.gitea-actions-runner.instances.${config.networking.hostName} = {
|
|
enable = true;
|
|
labels = [
|
|
# Provide a Debian base with NodeJS for actions
|
|
# "debian-latest:docker://node:18-bullseye"
|
|
# Fake the Ubuntu name, because Node provides no Ubuntu builds
|
|
# "ubuntu-latest:docker://node:18-bullseye"
|
|
# Provide native execution on the host using below packages
|
|
"native:host"
|
|
];
|
|
hostPackages = with pkgs; [
|
|
bash
|
|
coreutils
|
|
curl
|
|
gawk
|
|
gitMinimal
|
|
gnused
|
|
nodejs
|
|
wget
|
|
];
|
|
name = config.networking.hostName;
|
|
url = "https://${config.hostnames.git}";
|
|
tokenFile = config.secrets.giteaRunnerToken.dest;
|
|
};
|
|
|
|
# Make sure the runner doesn't start until after Gitea
|
|
systemd.services."gitea-runner-${config.networking.hostName}".after =
|
|
[ "gitea.service" ];
|
|
|
|
# API key needed to connect to Gitea
|
|
secrets.giteaRunnerToken = {
|
|
source = ../../../private/gitea-runner-token.age; # TOKEN=xyz
|
|
dest = "${config.secretsDirectory}/gitea-runner-token";
|
|
};
|
|
systemd.services.giteaRunnerToken-secret = {
|
|
requiredBy = [
|
|
"gitea-runner-${
|
|
config.services.gitea-actions-runner.instances.${config.networking.hostName}.name
|
|
}.service"
|
|
];
|
|
before = [
|
|
"gitea-runner-${
|
|
config.services.gitea-actions-runner.instances.${config.networking.hostName}.name
|
|
}.service"
|
|
];
|
|
};
|
|
|
|
};
|
|
|
|
}
|