alex/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

paths

Browse Source
This commit is contained in:
Alex Mickelson
2026-01-02 14:31:32 -07:00
parent de71f8ec2a
commit bc803bd624
2 changed files with 1 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/apply-kubernetes.yml vendored
View File

@@ -21,7 +21,7 @@ jobs:
steps: steps:
- name: update home server containers - name: update home server containers
env: env:
KUBECONFIG: .kube/config KUBECONFIG: /home/github/.kube/config
MY_GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }} MY_GITHUB_TOKEN: ${{ secrets.MY_GITHUB_TOKEN }}
HOMEASSISTANT_TOKEN: ${{ secrets.HOMEASSISTANT_TOKEN }} HOMEASSISTANT_TOKEN: ${{ secrets.HOMEASSISTANT_TOKEN }}
GRAFANA_PASSWORD: ${{ secrets.GRAFANA_PASSWORD }} GRAFANA_PASSWORD: ${{ secrets.GRAFANA_PASSWORD }}

12
nix/home-server.nix
View File

@@ -254,7 +254,6 @@
tokenFile = "/data/runner/github-infrastructure-token.txt"; tokenFile = "/data/runner/github-infrastructure-token.txt";
url = "https://github.com/alexmickelson/infrastructure"; url = "https://github.com/alexmickelson/infrastructure";
extraLabels = [ "home-server" ]; extraLabels = [ "home-server" ];
#workDir = "/data/runner/infrastructure/";
replace = true; replace = true;
serviceOverrides = { serviceOverrides = {
ReadWritePaths = [ ReadWritePaths = [
@@ -269,12 +268,8 @@
ProtectSystem = false; ProtectSystem = false;
PrivateMounts = false; PrivateMounts = false;
PrivateUsers = false; PrivateUsers = false;
#DynamicUser = true;
#NoNewPrivileges = false;
ProtectHome = false; ProtectHome = false;
#RuntimeDirectoryPreserve = "yes";
Restart = lib.mkForce "always"; Restart = lib.mkForce "always";
#RuntimeMaxSec = "7d";
}; };
extraPackages = with pkgs; [ extraPackages = with pkgs; [
docker docker
@@ -287,15 +282,8 @@
]; ];
}; };
}; };
# services.cron = {
# enable = true;
# systemCronJobs = [
# "*/5 * * * * root date >> /tmp/cron.log"
# ];
# };
networking.firewall.enable = false; networking.firewall.enable = false;
# networking.firewall.trustedInterfaces = [ "docker0" ];
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions # settings for stateful data, like file locations and database versions