From 7b3d175ff6098be005dcae1b3d7a3e05e2c88d5e Mon Sep 17 00:00:00 2001 From: Nydragon Date: Fri, 31 Jan 2025 11:57:53 +0100 Subject: [PATCH] feat: add secret for forgejo runner --- hosts/raptus/default.nix | 1 + hosts/raptus/forgejo.nix | 4 ++-- secrets/forgejo-runner-token.age | 13 +++++++------ 3 files changed, 10 insertions(+), 8 deletions(-) diff --git a/hosts/raptus/default.nix b/hosts/raptus/default.nix index f16d22d..f2b1ff6 100644 --- a/hosts/raptus/default.nix +++ b/hosts/raptus/default.nix @@ -25,6 +25,7 @@ in owner = "rustypaste"; group = "rustypaste"; }; + forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age; }; boot.loader.grub = { diff --git a/hosts/raptus/forgejo.nix b/hosts/raptus/forgejo.nix index 0d78066..32f1a99 100644 --- a/hosts/raptus/forgejo.nix +++ b/hosts/raptus/forgejo.nix @@ -20,11 +20,11 @@ in instances."raptus" = { enable = true; name = "raptus"; - tokenFile = config.age.secrets.forgejo-runner-token.age; + tokenFile = config.age.secrets.forgejo-runner-token.path; url = "https://git.ccnlc.eu"; labels = [ "debian-latest:docker://node:18-bullseye" - "nix:docker://ghcr.io/nydragon/runner:latest" + "nixos:docker://ghcr.io/nydragon/runner@sha256:0378d0f8ad08e2d4e541fba37c688fd46a3088d47314343ef3158ce94c7e1713" ]; }; }; diff --git a/secrets/forgejo-runner-token.age b/secrets/forgejo-runner-token.age index 74cc2be..98a7e37 100644 --- a/secrets/forgejo-runner-token.age +++ b/secrets/forgejo-runner-token.age @@ -1,7 +1,8 @@ age-encryption.org/v1 --> ssh-ed25519 b3HlPA dBkOMVkozSkc7hGVGBV8KanAOqT57d/FGTyPQnZGQBM -4MGa6vkR/XtD6scjA2giiDINdfFH4Y9Ebn/Pki7bxPM --> ssh-ed25519 WcjW5A HOrY4chLCOJJQmZqn2ax8sBWqFi1MnzwUmT3qY1+Uxk -4L36W1eX4rfzH0e6YWtJ4hEl5FoKA9Okd1CYNWP1yXU ---- syAd07l1R2c15ZVprT+nEw0IO2o/EAWPG0KieTVQxOE -tNhN(sfE kS()_k K/ieX/8 hS ~j$ \ No newline at end of file +-> ssh-ed25519 b3HlPA dlnUjkDRPRNWtziZtRBlCLatRFnfhUNl0KK5yqL8Zwk +5px5axQKE46D0BMLSxZwvm0pnNx/8dyVIhDyNKKh4q0 +-> ssh-ed25519 WcjW5A /MtEneOoeJd8ygIoYEv8NKFQsPdLPHxpKgs5bT+hTwg +t7Dsslx9BwyzmGd6QBnpuz+4d5UaVCFSutXax7ombKc +--- xoCj85JiGHk9fx/l7wnJF2qt86mr62yOlIkuA6a0xk0 +Hh=έ.!zW +;A31X;W.B,&hZ8x'Oɲ%t҆>m~سZ \ No newline at end of file