13 commits

Author	SHA1	Message	Date
Kiara Grouwstra	e71f32c4ba	max 5	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	6e1104a4d7	container dns ... rm dns	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	0363a51a91	enable firewall	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	69d80b99e6	document nftables	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	b130e65d52	generalize firewall hole	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	6dd9f1918b	rm agent exec ... plug hole in firewall format	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	54f2197809	disable firewall nftables ... disables nftables for woodpecker, just like for forgejo-ci	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	4a1f7f05a3	disable exec agent ... make service group setting conditional make secrets conditional make things conditional rm group	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	e01047070a	set service groups ... add agent groups	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	1983128704	configure user ... simplify secrets set just group for system users	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	631d76e8bc	un-template ... none like _file somehow?	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	72be0902d8	fix container agent	2025-08-04 18:08:41 +02:00
Kiara Grouwstra	3eae32b43b	add woodpecker CI ... add woodpecker status: agents error `agent could not auth: individual agent not found by token: sql: no rows in result set` allow manual set `image: bash` to initally test `local` woodpecker back-end split CI jobs image: `bash` (`local` back-end) -> `nixos/nix` (`docker` back-end) add debugging lines to CD pipeline to debug error `Could not open a connection to your authentication agent` add more debug prints to CD even more debugging continue debugging debug harder explicitly specify flakes as nixos/nix image is missing this rm /home update fedi203 wrap faulty statement fix check-resources split strace pkg un-strace	2025-08-04 18:08:41 +02:00