sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move hercules to agenix

Browse source
This commit is contained in:
zowoq 2024-07-09 11:41:05 +10:00
parent ec32c9d6a4
commit 3c554a18f8
14 changed files with 81 additions and 174 deletions
modules/darwin
hercules-ci.nix
hercules-ci
default.nix

24
modules/darwin/hercules-ci.nix Normal file
View file

@ -0,0 +1,24 @@
{ config, inputs, ... }:
{
age.secrets.hercules-binary-caches = {
file = "${toString inputs.self}/secrets/hercules-binary-caches.age";
mode = "600";
owner = "_hercules-ci-agent";
group = "_hercules-ci-agent";
};
age.secrets.hercules-cluster-join-token = {
file = "${toString inputs.self}/secrets/hercules-cluster-join-token.age";
mode = "600";
owner = "_hercules-ci-agent";
group = "_hercules-ci-agent";
};
services.hercules-ci-agent = {
enable = true;
settings = {
binaryCachesPath = config.age.secrets.hercules-binary-caches.path;
clusterJoinTokenPath = config.age.secrets.hercules-cluster-join-token.path;
};
};
}

23
modules/darwin/hercules-ci/default.nix
View file

@ -1,23 +0,0 @@
{ config, ... }:
{
age.secrets.binary-caches = {
file = ../../../secrets/binary-caches.age;
mode = "600";
owner = "_hercules-ci-agent";
group = "_hercules-ci-agent";
};
age.secrets.cluster-join-token = {
file = ../../../secrets/cluster-join-token.age;
mode = "600";
owner = "_hercules-ci-agent";
group = "_hercules-ci-agent";
};
services.hercules-ci-agent.enable = true;
services.hercules-ci-agent.settings = {
binaryCachesPath = config.age.secrets.binary-caches.path;
clusterJoinTokenPath = config.age.secrets.cluster-join-token.path;
};
}