noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add agenix secrets for github runners

Browse source
This commit is contained in:
Noa Aarts 2024-10-21 12:43:41 +02:00
parent 0ef5e0b9a6
commit 8b71caf26b
Signed by: noa
GPG key ID: 1850932741EFF672
4 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/nuos/configuration.nix
View file

@ -2,7 +2,7 @@
# your system. Help is available in the configuration.nix(5) man page, on
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
{ modulesPath, pkgs, inputs, lib, nix-colors, ... }:
{ modulesPath, pkgs, inputs, lib, nix-colors, config, ... }:
{
imports =
[
@ -143,6 +143,11 @@
};
};
age.secrets = {
"secrets/token-flurry".file = ../../secrets/github/flurry.age;
"secrets/token-nixconf".file = ../../secrets/github/nixconf.age;
};
services = {
nix-serve = {
enable = true;
@ -158,7 +163,7 @@
curl
];
name = "flurry-runner";
tokenFile = "/secrets/token-flurry";
tokenFile = config.age.secrets."secrets/token-flurry".path;
url = "https://github.com/itepastra/flurry";
};
nixconf-runner = {
@ -167,7 +172,7 @@
nixos-rebuild
];
name = "nixconf-runner";
tokenFile = "/secrets/token-nixconf";
tokenFile = config.age.secrets."secrets/token-nixconf".path;
url = "https://github.com/itepastra/nixconf";
};
};