sercanto/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

remove terraform effect and hercules secrets

Browse source 
also move cachix deploy token to repo root secrets
This commit is contained in:
zowoq 2023-09-15 11:39:35 +10:00
parent 9b325d8c38
commit c896c3e3b5
7 changed files with 30 additions and 79 deletions
modules/nixos/hercules-ci
default.nixsecrets.yaml

2
modules/nixos/hercules-ci/default.nix
View file

@ -9,14 +9,12 @@ in
{
sops.secrets."binary-caches.json" = herculesSecret;
sops.secrets."cluster-join-token.key" = herculesSecret;
sops.secrets."hercules-secrets" = herculesSecret;
services.hercules-ci-agent = {
enable = true;
settings = {
binaryCachesPath = secrets."binary-caches.json".path;
clusterJoinTokenPath = secrets."cluster-join-token.key".path;
secretsJsonPath = secrets."hercules-secrets".path;
};
};
}

5
modules/nixos/hercules-ci/secrets.yaml
View file

@ -1,6 +1,5 @@
cluster-join-token.key: ENC[AES256_GCM,data:Ba8S5Cx3NJR/FoKkSVc5pX1bwKkYHAhTid3dlWcGRXPCmVtrMgBKLjDZ5b3AajZio+IvS7XNajsVqPUB/rsBUPL+mz/DPbnI4bibLkB0KZl5v6FnMf6RbGr7RWbEsGXWlJh77l/AmGRWJTj7Dh3LaQ53dguhNIDuXGvNhTLs690/93Xnc+x+d5tzl2hNz/A4/IQxpsRoJJKygqGndbc0bTUPo0QZMLtf8kHQtCiozfm1SeW49ITnM+4VCOJB8NkSkwUfy5Rs574fFijYSOGT8LSSH0ly2oxHEY+UaJudRhjr5uzrcZPI/WrrtkI=,iv:87JRtvlkkExu37uYRaHojsk1vjhO1ocw2L9yE+7shpI=,tag:0de71eZjy8F/w0LQzOVAyg==,type:str]
binary-caches.json: ENC[AES256_GCM,data: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,iv:IOqba6lLXCEVZ+HNaH3uM4E3lbKzm8XCXlbAp6UPBIE=,tag:RX2d2UEWpZu48pW1UUaQcQ==,type:str]
hercules-secrets: ENC[AES256_GCM,data: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,iv:XD47L1jJhqXF7AIRN2yLhr3uTEFIMLeanAlGHCu6H18=,tag:taCIc+0ULwdUW1XSf0TlJg==,type:str]
sops:
kms: []
gcp_kms: []
@ -79,8 +78,8 @@ sops:
LzIvbE1pMUR1ZklLUWk1Q2RITDBpajgKC89UN6Emwuru91p0H0f57OI1/o3jjOeE
Lwbnzsp4YLyJNEA2ZBqC0lTiS7jMNpLNqFylZV2x0w7GnMKI5Zpqjw==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-08-01T23:08:51Z"
mac: ENC[AES256_GCM,data:aBuGtgt4YvcrpPsXYp6LX6zHSF+68wFZWEPjIlnFe3MyK3p5DevETpGSsKjodNiSQ+5NpIy3ecYz+nfAUjqxAbGHtniuBxwBkzQUBwCOcDZPp8Rh+YBtSjwgTsG/wkxDhTP9wiSq0nlpGxzv3Rh93BV+WB1i/9cO8slnYglbzw8=,iv:qx5or2iJ/jTua+9vdgj7URymEJKZc+gqE5EYIZwE4Dg=,tag:vvIoNkfqDVAJmP2TMdrEEQ==,type:str]
lastmodified: "2023-09-15T01:37:59Z"
mac: ENC[AES256_GCM,data:jKt1zmY+xkXV8qroMAah6w8h2onyKuDhneaOt9q8as1+UpEfhkpJza2LI8pQspoThvoNZK0Q1C0oEgF74S5UH6zYxfOiBVkXy72/kNm2XuiJfTXj1x+Rcdb1Itq34Ffrw+TsncEVSpvdcIGSFINce5PsvBnBdsdp9kSFQi6ZG+A=,iv:5IblazbdAGIODlCbxAu8XGFXF4G/esZ7LBZ3cmUG8gM=,tag:HMWFzpFokXAwY5XMpb6Tjw==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.3