dotfiles/nixos-config
1
0
Fork 0
mirror of https://github.com/srid/nixos-config.git synced 2026-01-09 17:52:36 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

more hercules

Browse source
This commit is contained in:
Sridhar Ratnakumar 2021-12-05 19:23:59 -05:00
parent 59d48328f8
commit 7680fa9e33
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
containers/hercules.nix
View file

@ -2,8 +2,9 @@
# A separate container to run Hercules effects
# https://docs.hercules-ci.com/hercules-ci/effects/
#
# TODO: Prevent access to local network, while allowing internet access
{
# TODO: hercules ci cache here
nix.binaryCachePublicKeys = [
"hercules-ci.cachix.org-1:ZZeDl9Va+xe9j+KqdzoBZMFJHVQ42Uu/c/1/KMC5Lw0="
];
@ -28,7 +29,8 @@
];
services.hercules-ci-agent.enable = true;
services.hercules-ci-agent.settings.concurrentTasks = 4;
services.hercules-ci-agent.settings.nixUserIsTrusted = lib.mkForce false;
nix.allowedUsers = [ "*" ];
nix.trustedUsers = [ "*" ];
networking.firewall.allowedTCPPorts = [ ];
};