felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: felschr:b19bbf6d813928550e8008e04daaf47af12036f7
Branches Tags
felschr:main
...
compare: felschr:95e12b115b7902b4cfacd7fee66ec0fe27de48b6
Branches Tags
felschr:main

2 commits
b19bbf6d81 ... 95e12b115b

Author SHA1 Message Date
Felix Schröter 95e12b115b
fix(forgejo): add gitea-runner to Nix allowed & trusted users
Some checks failed
Test / tests (push) Has been cancelled
Details
2025-01-19 13:29:47 +01:00
Felix Schröter 75dc56a59c
feat(forgejo): add packages to runner 2025-01-19 13:29:25 +01:00
1 changed files with 16 additions and 0 deletions
Show stats Expand all files Collapse all files

16
services/forgejo/runner.nix
View file

@ -18,12 +18,28 @@ in
tokenFile = ""; # dynamically retrieved from Forgejo (see further below) tokenFile = ""; # dynamically retrieved from Forgejo (see further below)
name = config.networking.hostName; name = config.networking.hostName;
labels = [ "native:host" ]; labels = [ "native:host" ];
hostPackages = with pkgs; [
# default
bash
coreutils
curl
gawk
gitMinimal
gnused
nodejs
wget
nix
];
settings = { settings = {
container.network = "host"; container.network = "host";
}; };
}; };
}; };
nix.settings.allowed-users = [ "gitea-runner" ];
nix.settings.trusted-users = [ "gitea-runner" ];
# automatically get registration token from forgejo # automatically get registration token from forgejo
systemd.services.forgejo.postStart = lib.mkBefore '' systemd.services.forgejo.postStart = lib.mkBefore ''
${pkgs.bash}/bin/bash -c '(while ! ${pkgs.netcat-openbsd}/bin/nc -z -U ${forgejoCfg.settings.server.HTTP_ADDR}; do echo "Waiting for unix ${forgejoCfg.settings.server.HTTP_ADDR} to open..."; sleep 2; done); sleep 2' ${pkgs.bash}/bin/bash -c '(while ! ${pkgs.netcat-openbsd}/bin/nc -z -U ${forgejoCfg.settings.server.HTTP_ADDR}; do echo "Waiting for unix ${forgejoCfg.settings.server.HTTP_ADDR} to open..."; sleep 2; done); sleep 2'