dotfiles/nixos-config
1
0
Fork 0
mirror of https://github.com/srid/nixos-config.git synced 2025-12-26 23:14:57 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Refactor

Browse source
This commit is contained in:
Sridhar Ratnakumar 2024-03-26 14:32:46 -04:00
parent 41e3faec87
commit 0204f97ee8
1 changed files with 11 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

20
systems/github-runner.nix
View file

@ -1,13 +1,17 @@
# TODO: WIP
# - [x] Intial config
# - [ ] Colmena deploy, with keys from 1Password.
# - [ ] Github Runners
# - [x] Colmena deploy, with keys from 1Password.
# - [x] Github Runners
# - [ ] Distributed builder to host (macOS)
# - [ ] Refactor, to allow multiple repos (then remove easy-github-runners.nix)
{ flake, pkgs, ... }:
let
inherit (flake) inputs;
inherit (inputs) self;
user = "github-runner";
group = "github-runner";
tokenFile = "/run/keys/github-runner-token.secret"; # See colmena keys in top-level flake.nix
in
{
imports = [
@ -32,23 +36,21 @@ in
services.openssh.enable = true;
# Runners
users.users.github-runner = {
users.users.${user} = {
inherit group;
isSystemUser = true;
group = "github-runner";
};
users.groups.github-runner = { };
nix.settings.trusted-users = [ "github-runner" ];
users.groups.${group} = { };
nix.settings.trusted-users = [ user ];
services.github-runners = {
perpetuum = {
inherit user group tokenFile;
enable = true;
replace = true;
tokenFile = "/run/keys/github-runner-token.secret";
extraPackages = with pkgs; [
coreutils
nixci
];
user = "github-runner";
group = "github-runner";
url = "https://github.com/srid/perpetuum";
name = "perpetuum-1";
};