forked from Fediversity/Fediversity
un-template
none like _file somehow?
This commit is contained in:
parent
fedf8cdf54
commit
ce6ca38b3d
SSH key fingerprint:
SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU
1 changed files with 45 additions and 114 deletions
|
|
@ -5,14 +5,6 @@
|
||||||
...
|
...
|
||||||
}:
|
}:
|
||||||
{
|
{
|
||||||
networking = {
|
|
||||||
firewall.allowedTCPPorts = [
|
|
||||||
22
|
|
||||||
80
|
|
||||||
443
|
|
||||||
];
|
|
||||||
};
|
|
||||||
|
|
||||||
security.acme = {
|
security.acme = {
|
||||||
acceptTerms = true;
|
acceptTerms = true;
|
||||||
defaults.email = "something@fediversity.eu";
|
defaults.email = "something@fediversity.eu";
|
||||||
|
|
@ -78,6 +70,8 @@
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# FIXME: make `WOODPECKER_AGENT_SECRET_FILE` work so i can just do the following again instead of using templates:
|
||||||
|
# `woodpecker-agents.agents.exec.environment.WOODPECKER_AGENT_SECRET_FILE = config.age.secrets.woodpecker-agent-exec.path;`
|
||||||
vars.generators."templates" = rec {
|
vars.generators."templates" = rec {
|
||||||
dependencies = [
|
dependencies = [
|
||||||
"woodpecker"
|
"woodpecker"
|
||||||
|
|
@ -110,29 +104,9 @@
|
||||||
'') files
|
'') files
|
||||||
);
|
);
|
||||||
|
|
||||||
# files."woodpecker-server.conf" = {
|
|
||||||
# secret = true;
|
|
||||||
# template = pkgs.writeText "woodpecker-server.conf" ''
|
|
||||||
# WOODPECKER_DATABASE_DRIVER=sqlite3
|
|
||||||
# WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=false
|
|
||||||
# WOODPECKER_OPEN=false
|
|
||||||
# WOODPECKER_ADMIN=kiara,fricklerhandwerk,niols
|
|
||||||
# WOODPECKER_HOST=https://woodpecker.fediversity.eu
|
|
||||||
# WOODPECKER_GITEA=true
|
|
||||||
# WOODPECKER_GITEA_URL=https://git.fediversity.eu
|
|
||||||
# WOODPECKER_GITEA_CLIENT_FILE=${config.vars.generators.woodpecker.files.woodpecker-gitea-client.placeholder}
|
|
||||||
# WOODPECKER_GITEA_SECRET_FILE=${config.vars.generators.woodpecker.files.woodpecker-gitea-secret.placeholder}
|
|
||||||
# WOODPECKER_AGENT_SECRET_FILE=${config.vars.generators.woodpecker-agent-secret.files.my-secret.placeholder}
|
|
||||||
# WOODPECKER_GRPC_SECRET_FILE=${config.vars.generators.woodpecker-rpc-secret.files.rpc-secret.placeholder}
|
|
||||||
# WOODPECKER_LOG_LEVEL=info
|
|
||||||
# WOODPECKER_DEFAULT_CLONE_PLUGIN=docker.io/woodpeckerci/plugin-git
|
|
||||||
# WOODPECKER_SERVER_ADDR=:8000
|
|
||||||
# WOODPECKER_GRPC_ADDR=:9000
|
|
||||||
# '';
|
|
||||||
# };
|
|
||||||
|
|
||||||
files =
|
files =
|
||||||
let
|
let
|
||||||
|
# https://woodpecker-ci.org/docs/administration/configuration/agent
|
||||||
shared = ''
|
shared = ''
|
||||||
WOODPECKER_SERVER=localhost:9000
|
WOODPECKER_SERVER=localhost:9000
|
||||||
WOODPECKER_USERNAME=x-oauth-basic
|
WOODPECKER_USERNAME=x-oauth-basic
|
||||||
|
|
@ -148,7 +122,29 @@
|
||||||
'';
|
'';
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
|
# https://woodpecker-ci.org/docs/administration/configuration/server
|
||||||
|
"woodpecker-server.conf" = {
|
||||||
|
secret = true;
|
||||||
|
template = pkgs.writeText "woodpecker-server.conf" ''
|
||||||
|
WOODPECKER_DATABASE_DRIVER=sqlite3
|
||||||
|
WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=false
|
||||||
|
WOODPECKER_OPEN=false
|
||||||
|
WOODPECKER_ADMIN=kiara,fricklerhandwerk,niols
|
||||||
|
WOODPECKER_HOST=https://woodpecker.fediversity.eu
|
||||||
|
WOODPECKER_GITEA=true
|
||||||
|
WOODPECKER_GITEA_URL=https://git.fediversity.eu
|
||||||
|
WOODPECKER_GITEA_CLIENT=${config.vars.generators.woodpecker.files.woodpecker-gitea-client.placeholder}
|
||||||
|
WOODPECKER_GITEA_SECRET=${config.vars.generators.woodpecker.files.woodpecker-gitea-secret.placeholder}
|
||||||
|
WOODPECKER_AGENT_SECRET=${config.vars.generators.woodpecker-agent-secret.files.my-secret.placeholder}
|
||||||
|
WOODPECKER_GRPC_SECRET=${config.vars.generators.woodpecker-rpc-secret.files.rpc-secret.placeholder}
|
||||||
|
WOODPECKER_LOG_LEVEL=info
|
||||||
|
WOODPECKER_DEFAULT_CLONE_PLUGIN=docker.io/woodpeckerci/plugin-git
|
||||||
|
WOODPECKER_SERVER_ADDR=:8000
|
||||||
|
WOODPECKER_GRPC_ADDR=:9000
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
# https://woodpecker-ci.org/docs/administration/configuration/backends/local#environment-variables
|
||||||
"woodpecker-agent-exec.conf" = {
|
"woodpecker-agent-exec.conf" = {
|
||||||
secret = true;
|
secret = true;
|
||||||
template = pkgs.writeText "woodpecker-agent-exec.conf" (
|
template = pkgs.writeText "woodpecker-agent-exec.conf" (
|
||||||
|
|
@ -163,6 +159,7 @@
|
||||||
);
|
);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# https://woodpecker-ci.org/docs/administration/configuration/backends/docker#environment-variables
|
||||||
"woodpecker-agent-podman.conf" = {
|
"woodpecker-agent-podman.conf" = {
|
||||||
secret = true;
|
secret = true;
|
||||||
template = pkgs.writeText "woodpecker-agent-podman.conf" (
|
template = pkgs.writeText "woodpecker-agent-podman.conf" (
|
||||||
|
|
@ -204,95 +201,29 @@
|
||||||
|
|
||||||
woodpecker-server = {
|
woodpecker-server = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
environmentFile = config.vars.generators."templates".files."woodpecker-server.conf".path;
|
||||||
# environmentFile = config.vars.generators."templates".files."woodpecker-server.conf".path;
|
|
||||||
# https://woodpecker-ci.org/docs/administration/configuration/server
|
|
||||||
environment = {
|
|
||||||
WOODPECKER_DATABASE_DRIVER = "sqlite3";
|
|
||||||
WOODPECKER_DISABLE_USER_AGENT_REGISTRATION = "false";
|
|
||||||
|
|
||||||
WOODPECKER_OPEN = "false";
|
|
||||||
WOODPECKER_ADMIN = "kiara,fricklerhandwerk,niols";
|
|
||||||
WOODPECKER_HOST = "https://woodpecker.fediversity.eu";
|
|
||||||
|
|
||||||
WOODPECKER_GITEA = "true";
|
|
||||||
WOODPECKER_GITEA_URL = "https://git.fediversity.eu";
|
|
||||||
WOODPECKER_GITEA_CLIENT_FILE = config.age.secrets.woodpecker-gitea-client.path;
|
|
||||||
WOODPECKER_GITEA_SECRET_FILE = config.age.secrets.woodpecker-gitea-secret.path;
|
|
||||||
|
|
||||||
WOODPECKER_AGENT_SECRET_FILE = config.vars.generators.woodpecker-agent-secret.files.my-secret.path;
|
|
||||||
WOODPECKER_GRPC_SECRET_FILE = config.vars.generators.woodpecker-rpc-secret.files.rpc-secret.path;
|
|
||||||
|
|
||||||
WOODPECKER_LOG_LEVEL = "info";
|
|
||||||
WOODPECKER_DEFAULT_CLONE_PLUGIN = "docker.io/woodpeckerci/plugin-git";
|
|
||||||
WOODPECKER_SERVER_ADDR = ":8000";
|
|
||||||
WOODPECKER_GRPC_ADDR = ":9000";
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
# https://woodpecker-ci.org/docs/administration/configuration/agent
|
# https://woodpecker-ci.org/docs/administration/configuration/agent
|
||||||
woodpecker-agents.agents =
|
woodpecker-agents.agents = {
|
||||||
# let
|
exec = {
|
||||||
# shared = {
|
enable = true;
|
||||||
# WOODPECKER_SERVER = "localhost:9000";
|
path = with pkgs; [
|
||||||
# # TODO: separate to agent-specific tokens?
|
git
|
||||||
# # TODO: why will it only accept `WOODPECKER_AGENT_SECRET`, not `WOODPECKER_AGENT_SECRET_FILE`?
|
git-lfs
|
||||||
# # WOODPECKER_AGENT_SECRET_FILE = config.vars.generators.woodpecker-agent-secret.files.my-secret.path;
|
woodpecker-plugin-git
|
||||||
# WOODPECKER_USERNAME = "x-oauth-basic";
|
bash
|
||||||
# WOODPECKER_HOSTNAME = "https://woodpecker.fediversity.eu";
|
coreutils
|
||||||
# WOODPECKER_MAX_WORKFLOWS = "4";
|
nix
|
||||||
# WOODPECKER_LOG_LEVEL = "info";
|
attic-client
|
||||||
# WOODPECKER_DEBUG_PRETTY = "false";
|
];
|
||||||
# WOODPECKER_DEBUG_NOCOLOR = "true";
|
environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
|
||||||
# WOODPECKER_GRPC_SECURE = "false"; # TODO: fix
|
|
||||||
# WOODPECKER_GRPC_VERIFY = "false";
|
|
||||||
# WOODPECKER_HEALTHCHECK = "false";
|
|
||||||
# };
|
|
||||||
# in
|
|
||||||
{
|
|
||||||
|
|
||||||
# local
|
|
||||||
|
|
||||||
exec = {
|
|
||||||
enable = true;
|
|
||||||
path = with pkgs; [
|
|
||||||
git
|
|
||||||
git-lfs
|
|
||||||
woodpecker-plugin-git
|
|
||||||
bash
|
|
||||||
coreutils
|
|
||||||
nix
|
|
||||||
attic-client
|
|
||||||
];
|
|
||||||
environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
|
|
||||||
# # https://woodpecker-ci.org/docs/administration/configuration/backends/local#environment-variables
|
|
||||||
# environment = lib.mkMerge [
|
|
||||||
# shared
|
|
||||||
# {
|
|
||||||
# WOODPECKER_BACKEND = "local";
|
|
||||||
# WOODPECKER_AGENT_LABELS = "type=local";
|
|
||||||
# WOODPECKER_AGENT_SECRET_FILE = config.age.secrets.woodpecker-agent-exec.path;
|
|
||||||
# }
|
|
||||||
# ];
|
|
||||||
};
|
|
||||||
|
|
||||||
# container
|
|
||||||
|
|
||||||
docker = {
|
|
||||||
enable = true;
|
|
||||||
environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
|
|
||||||
# # https://woodpecker-ci.org/docs/administration/configuration/backends/docker#environment-variables
|
|
||||||
# environment = lib.mkMerge [
|
|
||||||
# shared
|
|
||||||
# {
|
|
||||||
# WOODPECKER_BACKEND = "docker";
|
|
||||||
# DOCKER_HOST = "unix:///run/podman/podman.sock";
|
|
||||||
# WOODPECKER_AGENT_LABELS = "type=docker";
|
|
||||||
# WOODPECKER_AGENT_SECRET_FILE = config.age.secrets.woodpecker-agent-container.path;
|
|
||||||
# }
|
|
||||||
# ];
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
docker = {
|
||||||
|
enable = true;
|
||||||
|
environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
|
||||||
|
};
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [
|
networking.firewall.allowedTCPPorts = [
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue