diff --git a/.sops.yaml b/.sops.yaml
index 68c22d7..7982435 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -41,6 +41,15 @@ creation_rules:
- *build04
pgp:
- *zimbatm
+ - path_regex: roles/hercules-ci/.+\.yaml$
+ key_groups:
+ - age:
+ - *mic92
+ - *ryantm
+ - *build03
+ - *build04
+ pgp:
+ - *zimbatm
- path_regex: roles/.+\.yaml$
key_groups:
- age:
diff --git a/build03/configuration.nix b/build03/configuration.nix
index efeb0a1..990cfaa 100644
--- a/build03/configuration.nix
+++ b/build03/configuration.nix
@@ -14,7 +14,7 @@
../roles/buildkite.nix
../roles/common.nix
- ../roles/hercules-ci.nix
+ ../roles/hercules-ci
../roles/hetzner-network.nix
../roles/nginx.nix
diff --git a/build03/secrets.yaml b/build03/secrets.yaml
index 55f9d13..08713be 100644
--- a/build03/secrets.yaml
+++ b/build03/secrets.yaml
@@ -1,6 +1,3 @@
-#ENC[AES256_GCM,data:Unmxzr3fhszbLZX7,iv:pzVp9Rc4jKcfjl8wSxlhG7+UB39ZIF+1oD2BuRg6y+0=,tag:l0GBzXMpdaqw1hsBYsYsHQ==,type:comment]
-cluster-join-token.key: ENC[AES256_GCM,data:S0NukLMU0+Eh7zdTVgia1R3eLf46o1L3c2uZ5P6KkhnCnmnjQfdn5B2YEQf7nFQHygzVQR04hti+JaRtS2RIt3e/AirjipZpfMHlB8LStlI++kR/WD8iobc439US4QCb3aqH7WpDuU7BTwXaPygAlnE76Pwnjd6vJER3TaKaJXLb5jDo9Prn+O9n/SKUT6AxneLYPBMaIiy+t/NlL5e2/fivEA7zvifi6PCQpr0vtTPgqUGyMwZU/A4wYWoh2NnHfCpowvvhoMvLTl0LG/nWC9vE+qYTPkpl06fkLfwVngyV04HgBv97BqYC1A==,iv:5msnqFdS0bD3gFxzNc1/aZaPR7OWkdIyTn17VwfxhQI=,tag:GSXJKzh/SHZmxz2qyMOFjA==,type:str]
-binary-caches.json: ENC[AES256_GCM,data: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,iv:RoXj32rNKSH1jW5UjPj44VX66dBMKXPuWBcnQ8HHxec=,tag:/VMVWKh2S51whMAnMjMYNA==,type:str]
buildkite-token: ENC[AES256_GCM,data:ckvzbyXHuW3N4tgZMYd+dPre+YOEnJj3T627wER3+7L9CMrZtYQlj6qU+HyeplMGqig=,iv:OmXO+85jtY6nGNm62+sF8QJF4q93mx06jNKherySD+o=,tag:mCj29oJTwEmjMN+QpmzUmQ==,type:str]
buildkite-agent-key: ENC[AES256_GCM,data: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,iv:l3rVZA9QigI96ibMu9WRlA4UbVRzFt8CwF7+dCZ6tX0=,tag:B6EhsV97IVwaji8IgJHgPQ==,type:str]
buildkite-agent-key-pub: ENC[AES256_GCM,data:dqARMa5gzgO3qgMh7BXUJIcqcNusxW0tladrUVb9MTew92K2IHKMYAlKRGENKIHPnPAYaW9yISmXs4cD3rPCosrHoZsgtVvCGS83atqthnR7StmuEKWdxQ35573BOEXqt71v+yRk0CJQJIMEUbI=,iv:2fCB8h/vI2DEL/XSWJLhUjZgjzFYDtr7ncMpE6x8Wg4=,tag:lIq7abSvadAc9CnRa6EJkg==,type:str]
@@ -44,8 +41,8 @@ sops:
dkdxUGVnYms5SXF1QUtqRlBUSkxpSlkKtUELjyaXUHhRcUTElgLBPvppSjldWAh+
pjDzatq8F7NDPLpvHOAymYwu0G0B+LueWo3rO/coqONPxS9MMJQuvA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2021-12-23T20:15:18Z"
- mac: ENC[AES256_GCM,data:hMqjJ1ytf5lhmgVYdFZWO9kyt4pVqXxOaicSn04jaQLlQLCBkXNk3z2mTo4KKXHQ1rYy52bQqU9G7uvSaIbWsxrwtU1JvqvpWVrqMBJrsZUly7lTo5w3ajq0Bu5GTi08W5osVYXiyXRuUnTfK8V+WGJwIx4G7knQSneRh3ziCFI=,iv:jyQLlYXwrEUz3Di63D7/Y6JlWg/RY12Mms+2QlodMME=,tag:cV6kzF2euIGkmNU/OuRVFg==,type:str]
+ lastmodified: "2021-12-24T06:24:26Z"
+ mac: ENC[AES256_GCM,data:b4PLrghcBouUtNb1sO3Bm8iuCkrXv1K7cCJVlChF9X7U9GpXu+TSrRSZlbFmOqvlduUUhchPAUTw0dTP1y/i3Kvzf0/t8fDgsDNZd0WT19ZvYe2oQ+8LACvzNQk3VWTYXFYA5UsapBSh4NEkKfNM6n3opB5q9ygb85pqzz60bZU=,iv:3gzanU/S11kdnBg+HXtrNrCoaRLRA42JPrS//LT2ktQ=,tag:6B1LdJkgghuT+UQgEtRWig==,type:str]
pgp:
- created_at: "2021-09-29T17:02:42Z"
enc: |
diff --git a/build04/configuration.nix b/build04/configuration.nix
index 4559a56..ebc1dc0 100644
--- a/build04/configuration.nix
+++ b/build04/configuration.nix
@@ -3,7 +3,7 @@
imports = [
./hardware-configuration.nix
../roles/common.nix
- ../roles/hercules-ci.nix
+ ../roles/hercules-ci
];
nixpkgs.system = "aarch64-linux";
diff --git a/build04/secrets.yaml b/build04/secrets.yaml
index 91b27dd..e69de29 100644
--- a/build04/secrets.yaml
+++ b/build04/secrets.yaml
@@ -1,55 +0,0 @@
-cluster-join-token.key: ENC[AES256_GCM,data:bOXOuVXL73Eo6eXYWDkf4+ExsZIWAiT/kXw6CJDIYuHdJC8UgnFbVLQ0f4sUyVlOLBuiV5O4jF/t+y2dAmodWSnP4z+zEON7KHIKzfapQ1NNZNegECRvotCLKrEVOWN/AFq3SLPdz73W2rxxmCGpmpy5ZVaB86mjTr1PrLxhiYqhwLM5H9XyMqj8hMFdBC5Pg3Xomy2t2QJxOGSMEN+lhAv+4zrQbXcM3GcLRqDMnQPubdzF60OjXrRarnYWlkjNoykVJMqZIYruV3MSpoSZLWfrTcne+shBy1z3K9F8TaSdR21ImveQbnzdAg==,iv:+nVYGLaWh6o2lL4bwSkluXCGMnPv6QbzqR/OSX7MSJ0=,tag:Tonx6606mz/93ghfSbti5Q==,type:str]
-binary-caches.json: ENC[AES256_GCM,data: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,iv:26fhwfE0jxevaw6mWUuNauk0t4clhqSk1Q0E1M1HbWE=,tag:cmu+1ajB6cHhwanDCfuiCQ==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZaG01U0RDNUF3RkFBRWc1
- SHBSZlhuNE12TG9iVk9mUFlCN0RJL29iWWljCjNFVERBQmFCUDVBdnRDRTdZMjVK
- Ynl0ay9jeGJwdWVEem12UGsvbzQwVm8KLS0tIEZEWTVpcERtS1FFNGlvYUMzeWM0
- WENrK2kwaEg3NWlsZHJwRzh6Um5rVVkKUpYeDlrRd3UbBiuhhC4wg0oRXHGfrfBX
- UXBHkyrkBCXpCEff8O05kzUS5+BBsvNyocftDwg83Vjs6gzJwKJD/Q==
- -----END AGE ENCRYPTED FILE-----
- - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFT0pXNG5KMlJqNlA0em1u
- YmdYTEJESVlDM1FRSWdkK0xkb2trVXJDTGswCjJxU2Uzd1p1RytJR1RSREEraklL
- c3NxTmdrME9KZjB3bmxHMlowb00xbmMKLS0tIFFrU1ZWdDN5eVBySzRZdERZcnVv
- RzZ6MENZcXFwdzNuYmhZQ0tueGEzNDQKkIhuKZp4GwZz5EtHIagBmGay67NQJ6i8
- XLNV5z2JdXWtm1JyPwmbHs4aaDnGc0+41dmSnLy8Lf5UEgrp5DWD9A==
- -----END AGE ENCRYPTED FILE-----
- - recipient: age1vr4suv4lhtt8f59s25eukdfk67j7av72gvj7sk7ux6thusct3utqmn3pmf
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNHBQWmVSOEwyalZsZ2V5
- YXpOMjcyMVJra2UvYXFPRkxPT1o5OWhsTzBnCmhWNjBRRlp3ZHVGRGJHUEpnSjVN
- RzdoaWUwcWdKYW5BWEEyLzJSMXN5Nk0KLS0tIDh4SjFoMEZJZHA3MjBsRTNucndT
- cXAramZQYyttekZvajdwMHM0akpiVkEKRPAioKQ+esJBeb9I6WxQYNMuVg120TEL
- wWcGaJlUguxfncTKHguivgPyyV9F3Eq2e+qhDXlggdY2P++7oKSLGg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2021-12-23T20:13:12Z"
- mac: ENC[AES256_GCM,data:5swwIATTpPHvLi/TFF6DdY1zAorsmt5DrvPwgzD0M1v5Ocn7k+hKJUST0S4BEgFsxfEaNspk6eLvvMjVlU/qDjTYhs449nI5ObmW7763+3YKirIBVpXPsylptKestzc/Cmgo5rK0L6iytXG72m3wTO4RMdEUHoxAC1M1nuZ1Ndg=,iv:R6BLnKFs6+TD/0oYjh6FG2oPRcSUee5pLFjZq+khtDg=,tag:cQmmpBlAvy88LOJgHx5EPA==,type:str]
- pgp:
- - created_at: "2021-11-12T09:02:18Z"
- enc: |
- -----BEGIN PGP MESSAGE-----
-
- hQEMA3tEuTsG48KkAQgArnGUQxLamrnKQQfU/N4hZ2ztnfvS/CzOT1jGnTWsZDua
- awNX5kJ+Iq9f/Qfj80oeT4wJkytKXp1Bm0bIMsHGFmP3GO5ZplWankrwPqskcEKZ
- EIcDzWCr7SHhKN3aNHq45qAE7sv7vL435BvKxL7E4pkJ9M3UiOV6NqbQYGyoePki
- qBXfuuuhYZ09/U7GYB4ee6+pK1SePz/ybDdPdlRuLrj4ALSZySY394eK2nVHkbF0
- mAhLjLWzMkldc9Pof8P4ucX8QXWCPRZLRa75RPVGYDIqAC8hjcRyfvHir2EGgL94
- t9zwkFyvFfpplnjCYXuYCMZeLgu2iHfCCCouo4IqtNJcASh3Njmt/LKPzyHQmWQt
- P5dKA/V7/oZR6rQ4sZYg+55reAfqZOLQg0VJG2Jbd6a5adUFs/KrxLyVFDr7xj/1
- uhw77vSXEHIHfMJUbIzf0iibLNxd74ioktxjmvw=
- =unIX
- -----END PGP MESSAGE-----
- fp: 260353B993F8CE16752EF48C71BAF6D40C1D63D7
- unencrypted_suffix: _unencrypted
- version: 3.7.1
diff --git a/roles/hercules-ci.nix b/roles/hercules-ci.nix
deleted file mode 100644
index 6bddc30..0000000
--- a/roles/hercules-ci.nix
+++ /dev/null
@@ -1,13 +0,0 @@
-{ config, ... }:
-{
- sops.secrets."binary-caches.json".owner = "hercules-ci-agent";
- sops.secrets."cluster-join-token.key".owner = "hercules-ci-agent";
-
- services.hercules-ci-agent = {
- enable = true;
- # For some reason it wants a directory, and looks for specific filenames
- # in there.
- settings.staticSecretsDirectory =
- builtins.dirOf config.sops.secrets."cluster-join-token.key".path;
- };
-}
diff --git a/roles/hercules-ci/default.nix b/roles/hercules-ci/default.nix
new file mode 100644
index 0000000..57a3bee
--- /dev/null
+++ b/roles/hercules-ci/default.nix
@@ -0,0 +1,23 @@
+{ config, ... }:
+
+let
+ herculesSecret = {
+ owner = "hercules-ci-agent";
+ sopsFile = ./secrets.yaml;
+ };
+ secrets = config.sops.secrets;
+in
+{
+ sops.secrets."binary-caches.json" = herculesSecret;
+ sops.secrets."cluster-join-token.key" = herculesSecret;
+ sops.secrets."hercules-secrets" = herculesSecret;
+
+ services.hercules-ci-agent = {
+ enable = true;
+ settings = {
+ binaryCachesPath = secrets."binary-caches.json".path;
+ secretsJsonPath = secrets."hercules-secrets".path;
+ clusterJoinTokenPath = secrets."cluster-join-token.key".path;
+ };
+ };
+}
diff --git a/roles/hercules-ci/secrets.yaml b/roles/hercules-ci/secrets.yaml
new file mode 100644
index 0000000..230ef0e
--- /dev/null
+++ b/roles/hercules-ci/secrets.yaml
@@ -0,0 +1,65 @@
+cluster-join-token.key: ENC[AES256_GCM,data:Ba8S5Cx3NJR/FoKkSVc5pX1bwKkYHAhTid3dlWcGRXPCmVtrMgBKLjDZ5b3AajZio+IvS7XNajsVqPUB/rsBUPL+mz/DPbnI4bibLkB0KZl5v6FnMf6RbGr7RWbEsGXWlJh77l/AmGRWJTj7Dh3LaQ53dguhNIDuXGvNhTLs690/93Xnc+x+d5tzl2hNz/A4/IQxpsRoJJKygqGndbc0bTUPo0QZMLtf8kHQtCiozfm1SeW49ITnM+4VCOJB8NkSkwUfy5Rs574fFijYSOGT8LSSH0ly2oxHEY+UaJudRhjr5uzrcZPI/WrrtkI=,iv:87JRtvlkkExu37uYRaHojsk1vjhO1ocw2L9yE+7shpI=,tag:0de71eZjy8F/w0LQzOVAyg==,type:str]
+binary-caches.json: ENC[AES256_GCM,data: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,iv:IOqba6lLXCEVZ+HNaH3uM4E3lbKzm8XCXlbAp6UPBIE=,tag:RX2d2UEWpZu48pW1UUaQcQ==,type:str]
+hercules-secrets: ENC[AES256_GCM,data:nnVLdDiqh64PcPtdkik/MKI34vLb2EVdzMxQzT4nIZ5B+sSZnXgGQfuls4EsHlQovfv3zA5siEq3l491EQ9OB0S+01QuiEQBid7dEGu/RyItPxIqdhwvRD1JIM3iiLqsKoXu2EhJSgf0ij3SMZs38/Pvw4FTmyt2QnHQYWGkZUlholQUMN2cKc8lVH3Dui6sYMOXCP2a7QBooauVUpmt+ud6/2LT7hh7qy6gvlvwCBD+SIp4h4EKDNW70pvhnost4y+TKhcgGLbIdwg58IUukEAHuIgMuCIhLx4iAwLQhuSaNiMmgGzi84HCDxgT8FTNViU7Vtd62f2I3SoizJSU0WskFOSv/EB0UJnuM45KblFm+t9OcoT4frJguj0+rY3Opuec+xmxDF/agMNud2+d+zhmtsQ6Jjpz3MqZjZRToFGgynFHSICXA70FiW2ONQ+FoywYxmNcULk0EIdkX6+b8GXN9ztAZmPq8OxxkfUue1y7QlAtdwW7ftmxwwV3opqdZs0LZK/SfEoDdP5xiMczh/wBA4MdSdfqD8fSZIQTkSFLbbyAcvjbtNLoAGpGD7xynWO45Px6,iv:5SU8P/zBvDcmREOMh4ictrzvNNDTvZnrRAzHmKueVWs=,tag:4/x7sDC8cucFiWLkAnMJfA==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdUloNWE5aFdNWktiTURK
+ enhIYW1RM1d1ZTg1TlNYZEZXUERTQThWLzI4CjZ2VXBBckJHUFNGa0l4UHRCRVE3
+ Nm5lcFlRZUhBdDVSLzN5MnJiZ1YyVHMKLS0tIGRmcjVBaU4zZEJjcnFkU012QS90
+ MU5DM21sWS9VOEpBaDNvWnliL2o4bUUK7pyDU41dyDK2ryQ1fas9HoMwmanD9+nB
+ IpaL6XlGbpllftm+FlLFHOCpfn9iuEphGNzqCr5k+2C2CXTeNV+d6Q==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1Njc4bDJkMXNLYWYycUxj
+ MktiL1B3NTg5eDZ6YThLdXVVVnVPNjNkWWswClBJZ3hIMVk3dW04QmJ3ZGNJUFZ6
+ bEptdXZoVks5c05LamgzUkJjUlFncE0KLS0tIDVzWDBaMFlHNDUzU2hhUnJaUWpX
+ QkRadWxaam1MSFNSZytTK2RKbStMNlkKyutqCGwYAkkQx94F/FBBk/qrN9MbmhBf
+ jP+CetB/n1C22MmU4ga4wvuftuURrviyDLwmsKPNVX2xi8lcbtSF5g==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age1qg7tfjwzp6dxwkw9vej6knkhdvqre3fu7ryzsdk5ggvtdx854ycqevlwnq
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRMXBJM05yRkN0ZDRWWlRt
+ U3EzKzhUOGRwNVd2QUN0OEFVQWo3cjYyK3o4ClZ4YzJTcXRUZTAvTitPMzNwWkZI
+ R0FoVUhxdEYxMXI0d3FUcGQrNkRUaDQKLS0tIDk2dWUrM1ZBVDJ4a0FhR0xrR3Ni
+ eEdiNjEwRGVBUzZqd2ExR0dZdy8rdlkKdsHdWoj/bxAx2Op2uHAemedB30aSAWrS
+ zrvO3tbY7j41i51coELwp1DjyU0M5G/EPSiLTqnQXvWOus3wU1dDWw==
+ -----END AGE ENCRYPTED FILE-----
+ - recipient: age1vr4suv4lhtt8f59s25eukdfk67j7av72gvj7sk7ux6thusct3utqmn3pmf
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJSmc5UmlSb2tlVVUrZTRN
+ OGF3YlpxU1d3ZTFhY3FDVVBXODBBZnFHRlJjCk9IcHV5Z1dPVVQ4WDA3bmVia0E0
+ UzY4Uk8rS2NuamZMSi9LdXppVHU0V2sKLS0tIHRTYjdFSmN5TldSWFpOaUkrekVo
+ ZTV3Z1F0cGM4cHo5Qzh2aUdiczViZ1EKJ/wpSwwkJ8ldstwN+4GJFuZLbkvJXh5i
+ IA+7SJhlbaYlJaF7CXdzHsxvDrJnXDOmYbPDY1rhxOMxDU+r1981cg==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2021-12-24T06:34:20Z"
+ mac: ENC[AES256_GCM,data:2RX/yMV/oEQJt4HGvLfLgwJ8LP2TydQDPCb+OkL/CxjMwKKvI7Azw5r1CE1FPvMUr25bWbQgZm3xsYvh4JHqmLXw5AVPfE+Xl1NiGBMsilFmdQkUy5N7u4KGNort2LnlRtLPL/WNRlZUfaVzjZxLpK3CoujKeanUgzZx2nXFDgc=,iv:jYMTXzwR9myo7V1w1JOUczXW4wmILHmy08+x3g2YbtU=,tag:nKVn2ovWeSktEpl5r1mHSg==,type:str]
+ pgp:
+ - created_at: "2021-12-23T20:32:41Z"
+ enc: |
+ -----BEGIN PGP MESSAGE-----
+
+ hQEMA3tEuTsG48KkAQf/UrHgvy8V3MC+PxslURXQPPXICotR+21BEpBUTsYZfw7N
+ Zud/fj423+sR8wHPtoGgwVoT0H7IOqMEuiwHSJOt+WHzL18ke10vH5wD4orL1Ax9
+ 9Tj8mtybDOCGWoxluIPTIvOFDe3uSk4bGjpbx7Is/n2JV+NUHMG1FnllAGP81Se8
+ GlZEKe0Cw00Nmx0aMQTQNlvkk70N1YtzFmKmOU0wjPLr3Dl8fB41ufbVTNOEXKWa
+ nbxeo/IGvzu99LAlM5eU7PIk1tBSNczorr3NBe5+SZNggSkQTdUqp7EamZvveqKU
+ V4u1GAxS5/MabIReYfKTaZoDti7tPvw2nARBZx/nOdJeAYZ6cheBazJ4YUnPzz7e
+ ZZKC6r0lcazlaX9+OSYB4/9ZoptU3PYGoVEll7FaCo83hqcj9qHbit5BAkykIR8b
+ pSQUy+rnM55PGQO5EaqFfVrxvOtFVDpYCdX3GqGrKQ==
+ =p8yU
+ -----END PGP MESSAGE-----
+ fp: 260353B993F8CE16752EF48C71BAF6D40C1D63D7
+ unencrypted_suffix: _unencrypted
+ version: 3.7.1