mirror of
https://github.com/srid/nixos-config.git
synced 2025-12-26 23:14:57 +08:00
58 lines
1.4 KiB
Nix
58 lines
1.4 KiB
Nix
# TODO: WIP
|
|
# - [x] Intial config
|
|
# - [x] Colmena deploy, with keys from 1Password.
|
|
# - [x] Github Runners
|
|
# - [ ] Distributed builder to host (macOS)
|
|
# - [ ] Refactor, to allow multiple repos (then remove easy-github-runners.nix)
|
|
{ flake, pkgs, ... }:
|
|
|
|
let
|
|
inherit (flake) inputs;
|
|
inherit (inputs) self;
|
|
user = "github-runner";
|
|
group = "github-runner";
|
|
tokenFile = "/run/keys/github-runner-token.secret"; # See colmena keys in top-level flake.nix
|
|
in
|
|
{
|
|
imports = [
|
|
inputs.disko.nixosModules.disko
|
|
"${self}/nixos/disko/trivial.nix"
|
|
"${self}/nixos/parallels-vm.nix"
|
|
"${self}/nixos/nix.nix"
|
|
"${self}/nixos/self/primary-as-admin.nix"
|
|
"${self}/nixos/server/harden/basics.nix"
|
|
];
|
|
|
|
system.stateVersion = "23.11";
|
|
networking.hostName = "github-runner";
|
|
nixpkgs.hostPlatform = "aarch64-linux";
|
|
boot = {
|
|
binfmt.emulatedSystems = [ "x86_64-linux" ];
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi.canTouchEfiVariables = true;
|
|
};
|
|
};
|
|
services.openssh.enable = true;
|
|
|
|
# Runners
|
|
users.users.${user} = {
|
|
inherit group;
|
|
isSystemUser = true;
|
|
};
|
|
users.groups.${group} = { };
|
|
nix.settings.trusted-users = [ user ];
|
|
services.github-runners = {
|
|
perpetuum = {
|
|
inherit user group tokenFile;
|
|
enable = true;
|
|
replace = true;
|
|
extraPackages = with pkgs; [
|
|
coreutils
|
|
nixci
|
|
];
|
|
url = "https://github.com/srid/perpetuum";
|
|
name = "perpetuum-1";
|
|
};
|
|
};
|
|
}
|