kopatz/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

enable github runner

Browse Source
This commit is contained in:
Kopatz
2024-07-28 23:31:04 +02:00
parent 76a395149d
commit 1ce7519e74
5 changed files with 128 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
modules/services/default.nix
View File

@@ -4,6 +4,7 @@
./acme.nix
./caldav.nix
./opensnitch.nix
./github-runner.nix
./adguard.nix
./dnsmasq.nix
./games

64
modules/services/github-runner.nix
View File

@@ -1,42 +1,46 @@
{ config, pkgs, lib, inputs, ... }:
{
nixpkgs.config.permittedInsecurePackages = [
"nodejs-16.20.2"
];
users.groups.github-actions-runner = {};
let cfg = config.custom.services.github-runner;
in {
options.custom.services.github-runner = {
enable = lib.mkEnableOption "Enables github-runner service.";
};
config = lib.mkIf cfg.enable {
nixpkgs.config.permittedInsecurePackages = [ "nodejs-16.20.2" ];
users.groups.github-actions-runner = { };
users.users.github-actions-runner = {
isSystemUser = true;
hashedPasswordFile = config.age.secrets.github-runner-pw.path;
group = "github-actions-runner";
extraGroups = [ "docker" ];
isSystemUser = true;
hashedPasswordFile = config.age.secrets.github-runner-pw.path;
group = "github-actions-runner";
extraGroups = [ "docker" ];
};
age.secrets.github-runner-token = {
file = ../../secrets/github-runner-token.age;
owner = "github-actions-runner";
group = "github-actions-runner";
file = ../../secrets/github-runner-token.age;
owner = "github-actions-runner";
group = "github-actions-runner";
};
age.secrets.github-runner-pw = {
file = ../../secrets/github-runner-pw.age;
owner = "github-actions-runner";
group = "github-actions-runner";
file = ../../secrets/github-runner-pw.age;
owner = "github-actions-runner";
group = "github-actions-runner";
};
systemd.tmpfiles.rules = [
"d /github-actions-runner 0770 github-actions-runner github-actions-runner -"
"d /data 0770 github-actions-runner nginx -"
"d /data/website 0770 github-actions-runner nginx -"
"d /github-actions-runner 0770 github-actions-runner github-actions-runner -"
];
services.github-runners.oberprofis = {
enable = true;
name = "nixos-server";
tokenFile = config.age.secrets.github-runner-token.path;
url = "https://github.com/oberprofis";
user = "github-actions-runner";
workDir = "/github-actions-runner";
extraPackages = with pkgs; [ rsync nodePackages.pnpm nodejs_18 ];
serviceOverrides = {
BindPaths= [ "/github-actions-runner" "/data/website" ] ++ lib.optional config.services.kavita.enable "/mnt/1tbssd/kavita";
UMask = "022";
};
enable = true;
name = "nixos-server";
tokenFile = config.age.secrets.github-runner-token.path;
url = "https://github.com/oberprofis";
user = "github-actions-runner";
workDir = "/github-actions-runner";
extraPackages = with pkgs; [ rsync nodePackages.pnpm nodejs_18 ];
serviceOverrides = {
BindPaths = [ "/github-actions-runner" ]
++ lib.optional config.custom.services.kavita.enable
config.custom.services.kavita.dir;
UMask = "022";
};
};
};
}

5
modules/services/nginx.nix
View File

@@ -19,11 +19,6 @@ in {
owner = "nginx";
};
systemd.tmpfiles.rules = [
"d /data 0770 github-actions-runner nginx -"
"d /data/website 0770 github-actions-runner nginx -"
];
services.nginx = {
enable = true;
package = pkgs.nginxQuic;