container dns

machines/dev/fedi203/woodpecker.nix

@@ -12,9 +12,9 @@
 
   age.secrets =
     lib.mapAttrs
-      (_: owner: {
+      (_: group: {
-        inherit owner;
+        owner = "root";
-        group = owner;
+        inherit group;
         mode = "440";
       })
       {
@@ -216,12 +216,20 @@
           coreutils
           nix
           attic-client
+          openssh
+          npins
+          strace
         ];
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
+        extraGroups = [ "woodpecker-agent-exec" ];
       };
       docker = {
         enable = true;
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
+        extraGroups = [
+          "podman"
+          "woodpecker-agent-docker"
+        ];
       };
     };
   };
@@ -238,6 +246,11 @@
       enable = true;
       dates = "weekly";
     };
+    defaultNetwork.settings = {
+      dns_enabled = true;
+      ipv6_enabled = true;
+      dns = "95.215.185.6";
+    };
   };
 
   systemd.services.woodpecker-agent-docker = {