adding gitea runner
This commit is contained in:
@@ -290,10 +290,13 @@
|
||||
services.gitea-actions-runner = {
|
||||
instances.infrastructure = {
|
||||
enable = true;
|
||||
|
||||
name = "infrastructure-runner";
|
||||
url = "https://git.alexmickelson.guru";
|
||||
tokenFile = "/data/runner/gitea-infrastructure-token.txt";
|
||||
url = "https://gitea.example.com";
|
||||
tokenFile = "/data/runner/github-infrastructure-token.txt";
|
||||
|
||||
labels = [ "home-server" ];
|
||||
|
||||
hostPackages = with pkgs; [
|
||||
docker
|
||||
git-secret
|
||||
@@ -306,7 +309,8 @@
|
||||
];
|
||||
};
|
||||
};
|
||||
systemd.services.gitea-actions-runner-infrastructure.serviceConfig = {
|
||||
|
||||
systemd.services.gitea-runner-infrastructure.serviceConfig = {
|
||||
ReadWritePaths = [
|
||||
"/data/cloudflare/"
|
||||
"/data/runner/infrastructure"
|
||||
@@ -316,7 +320,8 @@
|
||||
|
||||
PrivateDevices = false;
|
||||
DeviceAllow = [ "/dev/zfs rw" ];
|
||||
ProtectProc = false;
|
||||
|
||||
ProtectProc = "default";
|
||||
ProtectSystem = false;
|
||||
PrivateMounts = false;
|
||||
PrivateUsers = false;
|
||||
@@ -326,6 +331,7 @@
|
||||
};
|
||||
|
||||
|
||||
|
||||
networking.firewall.enable = false;
|
||||
|
||||
# This value determines the NixOS release from which the default
|
||||
|
||||
Reference in New Issue
Block a user