machines/dev/fedi203/woodpecker.nix

@@ -12,9 +12,9 @@
 
   age.secrets =
     lib.mapAttrs
-      (_: group: {
-        owner = "root";
-        inherit group;
+      (_: owner: {
+        inherit owner;
+        group = owner;
         mode = "440";
       })
       {
@@ -216,20 +216,12 @@
           coreutils
           nix
           attic-client
-          openssh
-          npins
-          strace
         ];
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-exec.conf".path ];
-        extraGroups = [ "woodpecker-agent-exec" ];
       };
       docker = {
         enable = true;
         environmentFile = [ config.vars.generators."templates".files."woodpecker-agent-podman.conf".path ];
-        extraGroups = [
-          "podman"
-          "woodpecker-agent-docker"
-        ];
       };
     };
   };
@@ -246,11 +238,6 @@
       enable = true;
       dates = "weekly";
     };
-    defaultNetwork.settings = {
-      dns_enabled = true;
-      ipv6_enabled = true;
-      dns = "95.215.185.6";
-    };
   };
 
   systemd.services.woodpecker-agent-docker = {