infra/build01/buildkite.nix
zimbatm 3e2ae4a579
secrets: read all files from dir
this enforces 1:1 mapping between the filename and the attribute name
2020-01-12 17:12:29 +01:00

17 lines
375 B
Nix

{ pkgs, ...}:
{
services.buildkite-agent = {
enable = true;
tokenPath = "/run/keys/buildkite-token";
openssh.privateKeyPath = builtins.toPath "/run/keys/buildkite-agent-key";
openssh.publicKeyPath = builtins.toPath "/run/keys/buildkite-agent-key.pub";
runtimePackages = [
pkgs.gnutar
pkgs.bash
pkgs.nix
pkgs.gzip
];
};
}