remove cachix deploy

2023-11-10 09:24:28 +10:00 · 2023-11-10 09:24:28 +10:00 · c46fc2bf60
commit c46fc2bf60
parent aaaa2c2ed7
8 changed files with 0 additions and 221 deletions
--- a/.github/workflows/cachix.yml
+++ b/.github/workflows/cachix.yml
@ -1,31 +0,0 @@
-name: "cachix"
-
-on:
-  push:
-    branches: [master]
-  workflow_dispatch:
-
-concurrency:
-  group: "cachix"
-  cancel-in-progress: false
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/master' # ensure workflow_dispatch only runs on master
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install Nix
-        uses: cachix/install-nix-action@v23
-        with:
-          extra_nix_config: |
-            accept-flake-config = true
-            experimental-features = nix-command flakes
-      - name: Build Spec
-        run: |
-          nix build .#cachix-deploy-spec
-      - name: Deploy
-        env:
-          CACHIX_ACTIVATE_TOKEN: ${{ secrets.CACHIX_ACTIVATE_TOKEN }}
-        run: |
-          nix run --inputs-from .# nixpkgs#cachix -- deploy activate ./result
--- a/flake.nix
+++ b/flake.nix
@ -92,12 +92,6 @@
              };

            packages = pkgs.lib.optionalAttrs defaultPlatform {
-              cachix-deploy-spec = pkgs.writeText "cachix-deploy.json" (builtins.toJSON {
-                agents = {
-                  # hercules-ci-agent IFD breaks darwin02
-                  darwin03 = builtins.unsafeDiscardStringContext self.darwinConfigurations.darwin03.config.system.build.toplevel;
-                };
-              });
              pages = pkgs.runCommand "pages"
                {
                  buildInputs = [ config.devShells.mkdocs.nativeBuildInputs ];
--- a/modules/darwin/common/default.nix
+++ b/modules/darwin/common/default.nix
@ -1,7 +1,6 @@
 { pkgs, ... }:
 {
  imports = [
-    ./deploy.nix
    ./flake-inputs.nix
    ./reboot.nix
    ./telegraf.nix
--- a/modules/darwin/common/deploy.nix
+++ b/modules/darwin/common/deploy.nix
@ -1,5 +0,0 @@
-{
-  # cachix deploy secrets are installed manually from ./secrets.yaml
-  # https://github.com/LnL7/nix-darwin/blob/master/modules/services/cachix-agent.nix
-  services.cachix-agent.enable = true;
-}
--- a/modules/darwin/common/secrets.yaml
+++ b/modules/darwin/common/secrets.yaml
@ -1,57 +0,0 @@
-cachix-agent.token: ENC[AES256_GCM,data:BiRRAIw5A76oBdO+YWR0icFS4s3AbXuHWj1R9LTCJ7N4CF7qaH89NKwXEchfwEShJNay1vG3K/jtpaigwoYaEDmgj1YrEUBq3Tne17S8d4AzBr+s2FiOA0iv7T6/szcMm5ShspKl1xYu70mZDxcEuuEI0So8IBq1x2brB5Edw4tN39XrsXKUVIyvODJHQjSyEn0yJOuLw+0FbLZJvt27FQiXoMXoyW0jLh+1NbXY8C1CIg==,iv:8GIZzHaF7mbXOKfSq3vBc4wGa7NUZKbeLNIVxWqiBhg=,tag:HkeJmqVe+Yzf5C+EuF9m2A==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFYkhMNFh6Ky9LKzJ0Sjkz
-            MmtncDZYK1RuNm01WERsK1BORHIxR3l2SlhjCmx1NXBZYyt5aU1MaFBpOE1IK2tz
-            OG4xMmpiOERTYlBybjNDOHRoU3UxUmsKLS0tIGhtYmFDcG02VERSeE52WFkycnVr
-            VEgwM3V4RGFvRU1waWlpT3luUGNnT28KXrZysBm8UPHdP0Qd6xamxbqN4tCiulXd
-            DzIsO14Ja/JDNTYkqbes1HWpQ/v+PKfHtCHCeOTMUDQw69Fu+Jrhyw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3T1dia1VyUTlqQW0vbEZS
-            YVdLTXRGVmUwNnRta1piSlZ1ckdrNjR3cmpJCkF4QVpiNExuS3pUK2t0NVVKR1Vs
-            U0E4TnhLT0h2aGNFMmxvWlNRZ2x2M0UKLS0tIEtlTGFLRUhXNmdYdlNyRFlGdVhV
-            Z2lDOUFGSDR4RC9QRTVXNi96SHI5L3MKM/u+pySklXbqVmKwL3ban0mqSoPitzmY
-            2TIGxpywadh4sMlxA9vmvDoRsY3tB30FcccuSnzqnDqHeZCNlzCmhw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGM0xVQlpQOEZlUEZGV1h2
-            K2szK0lWY0xuSFRKQjNRSFB1a1gyZENiV25RCnBoUERjOHhNQmhzdm9ubSszUnFM
-            SGRrYmdDMllIdXBQenZaYkkxaXlBS0UKLS0tIHlkN3BOaFNPTm1wWjNTeVdibmxn
-            R3g3dDhGdzgzS3JnOU1xdVVXUXQyVTgKNLMW9Y7T53E2xYUkA3n2NsjKa4aMn7Fy
-            LIrKxMxQy/JeCyIq4rXWZar0aFMvWR32sMpjKevMv17qJuC2sCa7Zw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYSHhjZVA5dG84VU1QTE9n
-            LzhBN0tEL3hnSlRNbXVTSVc0MkNFdDAzT2d3Ck1DekpQSDJ1bmEzY2x5MWNLQzNh
-            RHRGWUMrSUV2ZE1PS205UFNUVW1oVGsKLS0tIGJrQTFEb1VRM3VPR3p3eW94dXNN
-            MXd3M3JOcll3S05waHErbk9ObHdyREEKibLrTGfvDD1evKrF/a9FLRRPz1qoMXp4
-            ztSeVoVpro0qjsNYidhX5RE84tQ4AQxD8H45qhCsVXoG7x+qYqEw6w==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZFc1WFNHWFNNOEtOMUl1
-            YXBJQ3gxbzBacDVSRTRXMWZucDhYY0UvMjBzCnN2dEJ1S2pHTXlFSFA1aW9ZR015
-            TS8rbTUvRzIyWHVlSDNmNXNrb0tmOVUKLS0tIHF2V3N6MWZEZGtYd0Fub2Z4Wmlu
-            ZFpjSjBhSXF6UTNXMkp1OGhTSi9mR3cKebKGaLAI+BP2U/9cALge82zm5F6saQY6
-            +mHtwJi4zeb+yTTU44KxLFEZynCt5FBJMOPXiNSHvmGEiq9QpbuxXg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-08-02T00:36:19Z"
-    mac: ENC[AES256_GCM,data:0s32EDKAglInEOnnMy9RLQT2wApOdD4zjRSF31//bCVAlp2VZaCjnELLnWAGrovl2E2/Lmbsdkr4ZnZCVeZ5B0JRZVZj+ecuZdxkzE9GXwCzk//YgsqF+UWSazMmSemHKNoy2pJvzoYGvXdKNUqqcU8p1CvQoc1xuIgRvUcvJro=,iv:KmVMR1qVMnzf9ywm+18wMd8Pm/yjZKsKXnE2/PjfOy4=,tag:O3ReRELuy8MNgZVgP0i3aQ==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3
--- a/modules/nixos/common/default.nix
+++ b/modules/nixos/common/default.nix
@ -2,7 +2,6 @@
 {
  imports = [
    ./auto-upgrade.nix
-    ./deploy.nix
    ../../shared/nix-daemon.nix
    ./reboot.nix
    ./security.nix
--- a/modules/nixos/common/deploy.nix
+++ b/modules/nixos/common/deploy.nix
@ -1,9 +0,0 @@
-{ config, ... }:
-{
-  sops.secrets.cachix-agent-token.sopsFile = ./secrets.yaml;
-
-  services.cachix-agent = {
-    enable = true;
-    credentialsFile = config.sops.secrets.cachix-agent-token.path;
-  };
-}
--- a/modules/nixos/common/secrets.yaml
+++ b/modules/nixos/common/secrets.yaml
@ -1,111 +0,0 @@
-cachix-agent-token: ENC[AES256_GCM,data:jqX0aET3/BpGiogJ8kmJ4fXhocdPIrZOFpzjf1ewAy23CR0xwPA12dIIKaRu90418qPRW5M8Cq/xzaSpkh3NThOlvT4RTQtP5UgCQt/rzvfzhMorq338fzv/cx+xSw/um0z0r5MqaLqGtOLbXeKDQvccXtJZuyyol1coBSwCfo0uBNLBiQzHshrLHxkjMLP4N488Hu7oVuCwp9ux6JISpj4tepccWehjgUoa,iv:omqsgGKITrAA6Y6wH1gEGM2bkWq40vhzzy1phE2ijkk=,tag:O6ip4qSmhBHPdzT7nHMU6A==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age17jtyn2y4fpey6q7ers9gtnh4580xj89zdjuew9nqhxywmsaw94fs5udupc
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVcWphb3pRTFFoRUUyQWZY
-            WkRGb1pyOWU4c3YzdEFvOHFuUUcwSUM1M1I0CkRtRmk0U1JmckhCNitZd2VRenJn
-            Q0VBTTJIbjNxdkpFNmh3Y3JWejZaUjAKLS0tIGExNTBrRkRqZS9QQUhvNkp3Z200
-            MnVKN2owY1VGSnllRFpqOHhnbzd3ME0KelIhFpnRc0gG3FsuDvYvzysJFXPmJFnN
-            aOtqPPrLBqghdyLb1mKobA9H17nMLygsIPQEx61RPjOgSamwuOFDng==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1kh6yvgxz9ys74as7aufdy8je7gmqjtguhnjuxvj79qdjswk2r3xqxf2n6d
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKRTM2ZkJSWkN2bHNHaEtq
-            ajVta08wSjFkbzVLejE0QzAxMHRocFlvQUNzCnNJZ1YxT0RNaXBlcVR6aGQ3c3RB
-            Y3cyU0ZwTGZSTXZpVUs1Ui8wUnJNZ3cKLS0tIFhsZ2oxYmJBbERhWVNScHhsTUFl
-            T3RlUi9Pa3RmS2k2enQwNlNTdjlrUHcKrzPxq1YTjraFIxpUPnb484M/TJa2NKQV
-            ug68Qpa16TqSi8miuWOJxIvSj3k8H3Bzq6si78rlSpQyekId4A7tBw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1qg7tfjwzp6dxwkw9vej6knkhdvqre3fu7ryzsdk5ggvtdx854ycqevlwnq
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTb0g3cVovdldweUQwdHVK
-            MUVKcVZ6Sm9DdHQ2b2E3U3hDR2JFRWNjdEhBClpJQlFmZzZqSkErZElCRU5vb05C
-            UDRWN3hFUXhmci8rNEUxU2JZWTlLa2MKLS0tIEV3THpUZGRSMnJvNUpxK2twK2xn
-            dG02UnVqc2l0b0VsVGJkWWo4NWFzM1kK9IpRvG9aKdJJiLX874Ypmiqp4xHm15JB
-            mKXhHX2NssMk2755P+eyJKmUa8q5cD+dieljBzWyhly5gBgU2jBrMA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1r464z5e2shvnh9ekzapgghevr9wy7spd4d7pt5a89ucdk6kr6yhqzv5gkj
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHMXhTUkZicWRidm54SWkr
-            Um40dndaUnZ6MmpTWlQ2MFJmU0RrdkhBcFRVCnZGUStDcnpiQVBEc05yMzBjMEMr
-            djVEKy9yQ0tiT1lsM1hnTTdLNE5ZN0EKLS0tIHV6Q3NoUmhSbWlJa2hHa2pSUmpS
-            ZytLQnlZSzc2dEg5Ull5c2w4RWw1YUEKQcU72Y9CPKNkqlURXVe4xSd3OOZoAeNu
-            oNjV6x3dTEBylOWEUPfrAYQ7r4Jb3Tn+Oco16h5y4oNLb9EEo1vh9w==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dg06e2l664lek3het63vrdrvzyrzt2tcf4peellhxc33aj2wf3ysgja8gl
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWGRXajkyWFdVQ3RZVEk3
-            TitFMEtnV1RoVXVOSndQSkVSbDVmMnpkUUdRCjZRT3oyY0t4ZGY4a2ozais4dlJY
-            bWljS01WdE5QaDJxcVFsU05Oc1JIY0UKLS0tIG0xMlRJSklBVG9VMnFpWTBoeHFo
-            ZWYwYXlQeERPVjIybmZUZTBVZmx3SjQKQGNOmM4093Ivongg/6Lhgc5NZg3JMzyC
-            V5RnmuX5zqwNFeeusjITHlXnB0ux8cIGrkgXxh5vD2wGXpzRvxnGIg==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age158v8dpppnw3yt2kqgqekwamaxpst5alfrnvvt7z36wfdk4veydrsqxc2tl
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNmttRjU5VlVyWTh6QU9V
-            d3kvVk9FOFlaeE9uQlJGZ2tnM1ZBOXN3RFNrCnVyckZGMjk3ZUlUWWdIcDZ6MmJm
-            dDJuUGliL1dhZ25LL2NRSyttTHpSYzQKLS0tIHVCZVJMYVNoZ0syN0NFQ0l0VWtF
-            S09XTk45dU9BOUE0THJrMEZxZ2tPclUKscFqbuSlEiIKK75ypca3F0OsY4SWqmsd
-            nb7vzMrT5xh7XNAfcPzYA3trsvHmcaPBmk3FaWS9KgyRy1ZAsbCNPQ==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age17n64ahe3wesh8l8lj0zylf4nljdmqn28hvqns2g7hgm9mdkhlsvsjuvkxz
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwdkQ3KzUwL2MwOVVxTlN6
-            R2szN0dVYWVoM0gzT3BoOU1qeENCckJNYUNjCmhLV09DeUlDMDFKWC84TDFEL29V
-            Y0xyZUZzT3hhNUdEVFhoaUJZSElmNU0KLS0tIDVxRmhyWm1sNkdrNFNYYjlCQWMr
-            ZkxBdm1sSE1VcHpicVowYVVzaVZPczQK7HOsEu/MDKqVfZCZSp9cVrKrNGy2v8wt
-            mIYHOh47Sk4Je2c8jPrJKv9XBcoDmTQoH13AR2NaWAQt7OG4A49krw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1d87z3zqlv6ullnzyng8l722xzxwqr677csacf3zf3l28dau7avfs6pc7ay
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXMDFnVXV5U1FmR0g5cWJa
-            bmhlN2NLUnlSMlFDeFFyN1BJdjNGYm5CUTBRClVLdHZSK0kxSHVoZUVRN2ZkdzlS
-            MlIwNUUwWlVwSktPTFcxby9CUEpKNVEKLS0tIGZCUFNNVWhJcG9GalNodWlpZXQ0
-            ZFFUK1NFcDcrTHNPTjMwb3RkeE82bTAKB42WngyzbrQPp6WHiEWzEltH3/sZM7mX
-            yNpT6e6x9IjxEDkPqhZzz+sbXORGbV9uGS6HiLNKeiukZwbVWNnJPA==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1jrh8yyq3swjru09s75s4mspu0mphh7h6z54z946raa9wx3pcdegq0x8t4h
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsMGNSb011VDlIOFRJYU9Q
-            YndxMUo5RCtXYTRxYlpYcStxUXJRYklvSnhJCmp2NFhVVzBqV2VFQ1hEVnM4RTZl
-            ZmFVeHUwSTlLZ05ZYmZxK01MUjBEaTQKLS0tIGlOQ3JkbTZiSm4xdGxSVzc1ZHdq
-            b0YyV2hrcEZHY0ZqQ0dSV0xqd0xhQVkK6HlPjtVLgnpj8NU44LPlcP9duDSsATYc
-            UbN2ic+pqjdaetr7JK+u+vRjIfWF4L3c6mWNUSOh61+0+mKRwyb8Fw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1m7xhem3qll35d539f364pm6txexvnp6k0tk34d8jxu4ry3pptv7smm0k5n
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhMXUzSVM5eVVjcHBqd3ZH
-            S3owK2M5VGxRVnpSSmFDK1lDSXQ4V2g5cHdvCndvL0pLQ3Q3ZXh1WjhKeHpoeHNp
-            V3N0SVA3N0U2L0I1eTVHTCtZdTFtbVEKLS0tIGRCUXNOMk52SGFwU0t2M3hZUE52
-            WngzZE9qd1pza0hRRXN3akJwNkREK3MKl6T8GhwRyeUyxRqGSnCPUuGC8Yd4lVmg
-            HfDIjyShodnrbqgwWyGDlaa+Z0ayPvTTNrEEztythhYGh/cb1HPTmw==
-            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1dzvjjum2p240qtdt2qcxpm7pl2s5w36mh4fs3q9dhhq0uezvdqaq9vrgfy
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGTXRycWpZekpyQ0RPZ0JB
-            QUxHZktidWhXcjZKNUkycXF1T2NKUDlsQmtrCkFpU0F4aWxpV2VZcXJLa0ZlYjhw
-            WHRxT2NJSXdKVWU0UmU5OGYzUk5FYWsKLS0tIGk3WGhqVm83ZkxpZi9wb0p3UGN1
-            YitRaG0rM0xJK0RHN2lQTkpXcVV6QWMK3okfdtcD4kpG2RMqp911zwKQAhQc9sfO
-            MecnQ5zpszGjjO6YUJTyoy1S9fsajGfhPbmAHKNz/kaIUE24KCmbYA==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-07-21T06:15:03Z"
-    mac: ENC[AES256_GCM,data:fL+CskuON7oZmfj+yWztmTt6bJVyGQDiDRgzKMotycvSQuY3WFiwwHBg1CXwykXyjjlvoX9vL2DJhBxL/+fc/GDcC+gDd1QtZqCJbppC2bk6OLYx8a2gCtd/ql+Ma6GY+JkcDApi8R2nr2+QK3jrOo1xXK18Mht6RdIjdPvOdP0=,iv:jD/4Jy4SVrFXENc+Zr7woPoW14Eij0ZEkSRRHVNt6vk=,tag:J3FSNztymCnGfb/aLYTsEA==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3