sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move hercules to agenix

Browse source
This commit is contained in:
zowoq 2024-07-09 11:41:05 +10:00
parent ec32c9d6a4
commit 3c554a18f8
14 changed files with 81 additions and 174 deletions
modules/nixos
hercules-ci.nix

27
modules/nixos/hercules-ci.nix Normal file
View file

@ -0,0 +1,27 @@
{ config, inputs, ... }:
{
age.secrets.hercules-binary-caches = {
file = "${toString inputs.self}/secrets/hercules-binary-caches.age";
owner = "hercules-ci-agent";
};
age.secrets.hercules-cluster-join-token = {
file = "${toString inputs.self}/secrets/hercules-cluster-join-token.age";
owner = "hercules-ci-agent";
};
age.secrets.hercules-secrets = {
file = "${toString inputs.self}/secrets/hercules-secrets.age";
owner = "hercules-ci-agent";
};
services.hercules-ci-agent = {
enable = true;
settings = {
binaryCachesPath = config.age.secrets.hercules-binary-caches.path;
clusterJoinTokenPath = config.age.secrets.hercules-cluster-join-token.path;
# secrets file is needed for effects
secretsJsonPath = config.age.secrets.hercules-secrets.path;
};
};
}