alex/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding gitea runner

Browse Source
This commit is contained in:
Alex Mickelson
2026-01-27 21:21:42 -07:00
parent cefe7caa1c
commit 726edef18b
1 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
nix/home-server.nix
View File

@@ -290,10 +290,13 @@
services.gitea-actions-runner = { services.gitea-actions-runner = {
instances.infrastructure = { instances.infrastructure = {
enable = true; enable = true;
name = "infrastructure-runner"; name = "infrastructure-runner";
url = "https://git.alexmickelson.guru"; url = "https://gitea.example.com";
tokenFile = "/data/runner/gitea-infrastructure-token.txt"; tokenFile = "/data/runner/github-infrastructure-token.txt";
labels = ["home-server"];
labels = [ "home-server" ];
hostPackages = with pkgs; [ hostPackages = with pkgs; [
docker docker
git-secret git-secret
@@ -306,7 +309,8 @@
]; ];
}; };
}; };
systemd.services.gitea-actions-runner-infrastructure.serviceConfig = {
systemd.services.gitea-runner-infrastructure.serviceConfig = {
ReadWritePaths = [ ReadWritePaths = [
"/data/cloudflare/" "/data/cloudflare/"
"/data/runner/infrastructure" "/data/runner/infrastructure"
@@ -316,7 +320,8 @@
PrivateDevices = false; PrivateDevices = false;
DeviceAllow = [ "/dev/zfs rw" ]; DeviceAllow = [ "/dev/zfs rw" ];
ProtectProc = false;
ProtectProc = "default";
ProtectSystem = false; ProtectSystem = false;
PrivateMounts = false; PrivateMounts = false;
PrivateUsers = false; PrivateUsers = false;
@@ -326,6 +331,7 @@
}; };
networking.firewall.enable = false; networking.firewall.enable = false;
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default