mirror of
https://github.com/srid/nixos-config.git
synced 2026-05-11 17:36:07 +08:00
gh runner: switch to pat
This commit is contained in:
parent
1c254abf17
commit
513dc7b31c
1 changed files with 6 additions and 8 deletions
|
|
@ -49,6 +49,7 @@ in
|
|||
"emanote"
|
||||
"haskell-flake"
|
||||
"nixos-config"
|
||||
"ema"
|
||||
];
|
||||
};
|
||||
sopsPrefix = lib.mkOption {
|
||||
|
|
@ -100,18 +101,15 @@ in
|
|||
};
|
||||
in
|
||||
userModule // {
|
||||
|
||||
sops.secrets = lib.listToAttrs (builtins.map
|
||||
(name: lib.nameValuePair "${cfg.sopsPrefix}/${name}" {
|
||||
mode = "0440";
|
||||
})
|
||||
cfg.repositories);
|
||||
sops.secrets."${cfg.sopsPrefix}/srid".mode = "0440";
|
||||
|
||||
containers =
|
||||
lib.listToAttrs (builtins.map
|
||||
(name:
|
||||
let tokenFile = top.config.sops.secrets."${cfg.sopsPrefix}/${name}".path;
|
||||
in lib.nameValuePair "github-runner-${name}" {
|
||||
let
|
||||
tokenFile = top.config.sops.secrets."${cfg.sopsPrefix}/srid".path;
|
||||
in
|
||||
lib.nameValuePair "github-runner-${name}" {
|
||||
autoStart = true;
|
||||
bindMounts."${tokenFile}" = {
|
||||
hostPath = tokenFile;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue