sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

modules/nixos/buildbot: update cachix

Browse source
This commit is contained in:
zowoq 2023-12-24 09:35:53 +10:00
parent 6a63432eba
commit a2629f2a37
2 changed files with 7 additions and 11 deletions
hosts/build03
secrets.yaml
modules/nixos
buildbot.nix

5
hosts/build03/secrets.yaml
View file

@ -5,7 +5,6 @@ nur-update-github-token: ENC[AES256_GCM,data:KIZCx9IeuBHZei2V13iiyHzCedhkkGEd08m
hydra-users: ENC[AES256_GCM,data:askAB+a3bsFvue/j9i6sYSwgOQl+rL+uh+1+z+xizzBOWdTZcvRh5uFHTkg7MV/E7tG7eRByQ7b+v/onJ4+l3rGJJ6qsWtLLLizC1rusngsAXyI9jt66eqpsyacN5kw8cKILjGearptrhUZDWdKpbaHII6fwUbWbjyV5fpoQzNmI4VELWEQMZ50yECfAfCLHx9iTdoMJHPXzhqwvAZ+TbX6TsyqbDrrNauYWNUBhCK7E2tDYAQqOGhxnQWI+gQs=,iv:Baqyd/WfloMuXTiICD2dlvENst8G6YU9rSHdRkTECkU=,tag:z4j5dYcba3aZTyWu5wvkzw==,type:str]
hetzner-borgbackup-ssh: ENC[AES256_GCM,data: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,iv:550mzEValpqVruLQBMMJeJHVyYfaxNHwCvXkvz66qI0=,tag:k48T+9AtJs8GTVchyEP8Jw==,type:str]
cachix-auth-token: ENC[AES256_GCM,data:AlZlzPSdYSrQV7ENPSvUGbOwTmvLeRRuPBCKUHJJLYdmwcC3yuGER/O5xL809fuDs+ii3BTfA7So9iZr0EFSfreAy4s7KkD/nRElTf71sGNN/+01S9pkPMdgXtdPxx7QySpIiuW+PYKgEWcn5ZdMFNurIx8g8O0QMqkppqfc/s9v6f3zBD1VQ5VM+DBksdYnsnVhuXA=,iv:AUSWe1xHqjvqkgxIgejgyyw13Z9cJVVSYdk6+1Hdrzs=,tag:WF9soVRIx57VBN1A5I99BQ==,type:str]
cachix-name: ENC[AES256_GCM,data:DhzIMyT+B9wvMoK9Iw==,iv:5pnXyQosbF/HFmbDFmfSaz4XWkfiA0/ccfe/yw4LvbM=,tag:E7+u/+aEK83cYygk88ZYOw==,type:str]
buildbot-github-oauth-secret: ENC[AES256_GCM,data:XDEbK5ahb5qiDdmq2gOyIch/NDFK/qjA6gX3rQ0XZthshiO3OfpAng==,iv:ze2R9Laji2FR1qp3LkeRPfKC0ebH0fF4ZTQ4mLVliUs=,tag:eT0jpnj2v7q3L6vyVLAeeQ==,type:str]
buildbot-github-token: ENC[AES256_GCM,data:t62X1d2Uw62YwmJnENSS629OrVRT9D2zpkZeF9UR144KZNZ01TxSWA==,iv:Lv3ryF1U5zUQreH9LZa60LZ4sgxVFIR0jd4+VELSkMg=,tag:EyKdmC9goF4UZeUKBDeAzA==,type:str]
buildbot-github-webhook-secret: ENC[AES256_GCM,data:AtUFcOjLivJt8np5451Wfol5s48R4vW5gJPisT+hMD7dFAvucKriQEY+mcAMqL1X6w==,iv:oBKj9XXu/4mkeH+3KkMlWSx8GnMoXwBugNuG8Uu3XtU=,tag:8cBZVE7TOJf3QEqxfsuF8g==,type:str]
@ -71,8 +70,8 @@ sops:
WUZQSGQyQy9halJsRTIvb1FGV08zZEEKmjlYY6epTuZKRBcVyjPvJI5XKQtP5Yag
FMrI+M6hUeyBeCade5C+Y4eGQbt57BWLmsX7u0J1WTlkUSS5j7+wPg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-12-09T03:56:06Z"
mac: ENC[AES256_GCM,data:52KSi/jjcB6jz9onJ2/JZgYggYGY4WypyWLQHeGxKsdJmr9AZV0Ue8EXa6bgz3tuIZqISw8zx58ZDtyQ/LcYN8iUkK55ac2XG22wW96by4fUBGFROt/6ck+CrfW1sbljmOF+NyMGgjtw0t2hUmUJSUk8KmmKTHd49L+Pd+NjKYk=,iv:uBT7S/blCgol8gjtE9twd8Z5z4ruhii3bFaNfNv3ZYY=,tag:0gWX2iezmqaM3ygZkO5u8w==,type:str]
lastmodified: "2023-12-23T23:33:29Z"
mac: ENC[AES256_GCM,data:MtGteeGBewbg2Bfn1rDMK93Yj3DGdjB4ak3vLsEFNeJAK4C7djwYmB0JTnTG8g+70WXLGfik//C8JfInpTzHnTxbyOjyN2TwXIsf68j7HBOPV60TbQibvbm1b5u6JgTW1vtHnF+mFnL/9pENlD3+jIy5fUOpfIK5wx1wFO3Nym4=,iv:T2LWjzVxxBGZJafr6uB8dazewDiFC2Wz1fUrVyje4O8=,tag:HJVzGUmTUd1gGTUi+ADO0A==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.8.1

13
modules/nixos/buildbot.nix
View file

@ -18,6 +18,7 @@
sops.secrets.buildbot-github-token = { };
sops.secrets.buildbot-github-webhook-secret = { };
sops.secrets.buildbot-nix-workers = { };
sops.secrets.cachix-auth-token = { };
services.buildbot-nix.master = {
enable = true;
@ -26,6 +27,10 @@
evalMaxMemorySize = "4096";
evalWorkerCount = 16;
workersFile = config.sops.secrets.buildbot-nix-workers.path;
cachix = {
name = "nix-community";
authTokenFile = config.sops.secrets.cachix-auth-token.path;
};
github = {
tokenFile = config.sops.secrets.buildbot-github-token.path;
webhookSecretFile = config.sops.secrets.buildbot-github-webhook-secret.path;
@ -63,14 +68,6 @@
"buildbot-worker.service"
];
sops.secrets.cachix-auth-token = { };
sops.secrets.cachix-name = { };
systemd.services.buildbot-master.serviceConfig.LoadCredential = [
"cachix-auth-token:${config.sops.secrets.cachix-auth-token.path}"
"cachix-name:${config.sops.secrets.cachix-name.path}"
];
sops.secrets.buildbot-nix-worker-password = { };
services.buildbot-nix.worker = {