root/the_prg_server_configuration
1
0
Fork 0
mirror of https://codeberg.org/polyteknisk-radiogruppe/the_prg_server_configuration.git synced 2026-10-21 03:15:46 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add Github Actions support to the build machine.

Browse source
This commit is contained in:
Root User 2026-10-05 11:47:10 +02:00
parent 4732cc0722
commit b0a415a7ee
Signed by: root
GPG key ID: 087F0A95E5766D72
5 changed files with 113 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

21
nix-system-configs/modules/secrets-config/sops-build-machine.nix
View file

@ -4,18 +4,7 @@
lib,
...
}: {
imports = let
# replace this with an actual commit id or tag
commit = "17eea6f3816ba6568b8c81db8a4e6ca438b30b7c";
in [
"${builtins.fetchTarball {
url = "https://github.com/Mic92/sops-nix/archive/${commit}.tar.gz";
# replace this with an actual hash
sha256 = "ktjWTq+D5MTXQcL9N6cDZXUf9kX8JBLLBLT0ZyOTSYY=";
}}/modules/sops"
];
# This will add secrets.yml to the nix store
# This will add secrets.yml to the Nix store
# You can avoid this by adding a string to the full path instead, i.e.
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
sops.defaultSopsFile = ../../secrets/build_machine/secrets.yaml;
@ -34,4 +23,12 @@
owner = "root";
mode = "0400";
};
sops.secrets."github_runner_token" = {
format = "yaml";
sopsFile = ../../secrets/build_machine/secrets.yaml;
owner = "root";
mode = "0400";
restartUnits = ["github-runner-build-machine.service"];
};
}