container dns

set service groups
add packages used for debugging
2025-07-27 10:25:42 +02:00 · 2025-07-27 10:25:24 +02:00 · 2025-07-27 10:24:27 +02:00 · 2025-07-27 10:24:09 +02:00
1 changed files with 16 additions and 3 deletions
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@ -12,9 +12,9 @@

  age.secrets =
    lib.mapAttrs
-      (_: owner: {
-        inherit owner;
-        group = owner;
+      (_: group: {
+        owner = "root";
+        inherit group;
        mode = "440";
      })
      {
@ -216,12 +216,20 @@
          coreutils
          nix
          attic-client
+          openssh
+          npins
+          strace
        ];
        environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
+        extraGroups = [ "woodpecker-agent-exec" ];
      };
      docker = {
        enable = true;
        environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
+        extraGroups = [
+          "podman"
+          "woodpecker-agent-docker"
+        ];
      };
    };
  };
@ -238,6 +246,11 @@
      enable = true;
      dates = "weekly";
    };
+    defaultNetwork.settings = {
+      dns_enabled = true;
+      ipv6_enabled = true;
+      dns = "95.215.185.6";
+    };
  };

  systemd.services.woodpecker-agent-docker = {
Author	SHA1	Message	Date
Kiara Grouwstra	9b6b1c6e9f	container dns	2025-07-27 10:25:42 +02:00
Kiara Grouwstra	25041f55f7	set service groups	2025-07-27 10:25:24 +02:00
Kiara Grouwstra	965e71ddb8	add packages used for debugging	2025-07-27 10:24:27 +02:00
Kiara Grouwstra	81e5586f4d	set just group for system users	2025-07-27 10:24:09 +02:00