aciceri/nixfleet
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

New hercules-ci-secrets-json secret

Browse source
This commit is contained in:
Andrea Ciceri 2023-12-08 10:54:25 +01:00
parent 8bcc6d32eb
commit 83b8f7d952
Signed by: aciceri
SSH key fingerprint: SHA256:/AagBweyV4Hlfg9u092n8hbHwD5fcB6A3qhDiDA65Rg
4 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/default.nix
View file

@ -81,6 +81,7 @@
"cachix-personal-token".owner = "ccr"; "cachix-personal-token".owner = "ccr";
"hercules-ci-join-token".owner = "hercules-ci-agent"; "hercules-ci-join-token".owner = "hercules-ci-agent";
"hercules-ci-binary-caches".owner = "hercules-ci-agent"; "hercules-ci-binary-caches".owner = "hercules-ci-agent";
"hercules-ci-secrets-json".owner = "hercules-ci-agent";
"git-workspace-tokens".owner = "ccr"; "git-workspace-tokens".owner = "ccr";
}; };
}; };

7
modules/hercules-ci/default.nix
View file

@ -1,14 +1,11 @@
{ {config, ...}: {
config,
pkgs,
...
}: {
services.hercules-ci-agent = { services.hercules-ci-agent = {
enable = true; enable = true;
settings = { settings = {
concurrentTasks = 32; concurrentTasks = 32;
clusterJoinTokenPath = config.age.secrets.hercules-ci-join-token.path; clusterJoinTokenPath = config.age.secrets.hercules-ci-join-token.path;
binaryCachesPath = config.age.secrets.hercules-ci-binary-caches.path; binaryCachesPath = config.age.secrets.hercules-ci-binary-caches.path;
secretsJsonPath = config.age.secrets.hercules-ci-secrets-json.path;
}; };
}; };

1
secrets/default.nix
View file

@ -12,6 +12,7 @@ in
"autistici-password.age".publicKeys = [ccr-ssh ccr-gpg thinkpad]; "autistici-password.age".publicKeys = [ccr-ssh ccr-gpg thinkpad];
"hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b picard]; "hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b picard];
"hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b picard]; "hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b picard];
"hercules-ci-secrets-json.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b picard];
"minio-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership]; "minio-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership];
"aws-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b]; "aws-credentials.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
"nextcloud-admin-pass.age".publicKeys = [ccr-ssh ccr-gpg rock5b]; "nextcloud-admin-pass.age".publicKeys = [ccr-ssh ccr-gpg rock5b];

BIN
secrets/hercules-ci-secrets-json.age Normal file
View file

Binary file not shown.