69 lines
1.7 KiB
Nix
69 lines
1.7 KiB
Nix
let
|
|
|
|
secrets = import ./secrets;
|
|
|
|
in
|
|
{
|
|
|
|
network.description = "nix-community infra";
|
|
|
|
build01 =
|
|
{ resources, ... }:
|
|
{
|
|
imports = [
|
|
./build01/configuration.nix
|
|
];
|
|
|
|
deployment.targetHost = "94.130.143.84";
|
|
|
|
deployment.keys.buildkite-token = {
|
|
text = secrets.buildkite-token;
|
|
user = "buildkite-agent";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys.buildkite-agent-key = {
|
|
text = secrets.buildkite-agent-key;
|
|
user = "buildkite-agent";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys."buildkite-agent-key.pub" = {
|
|
text = secrets."buildkite-agent-key.pub";
|
|
user = "buildkite-agent";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys.gitlab-runner-registration = {
|
|
text = secrets.gitlab-runner-registration;
|
|
user = "gitlab-runner";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys."id_rsa" = {
|
|
text = secrets.github-r-ryantm-key;
|
|
destDir = "/home/r-ryantm/.ssh";
|
|
user = "r-ryantm";
|
|
group = "r-ryantm";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys."github_token.txt" = {
|
|
text = secrets.github-r-ryantm-token;
|
|
destDir = "/var/lib/nixpkgs-update";
|
|
user = "r-ryantm";
|
|
group = "r-ryantm";
|
|
permissions = "0600";
|
|
};
|
|
|
|
deployment.keys."cachix.dhall" = {
|
|
text = secrets."cachix.dhall";
|
|
destDir = "/var/lib/nixpkgs-update/cachix";
|
|
user = "r-ryantm";
|
|
group = "r-ryantm";
|
|
permissions = "0600";
|
|
};
|
|
|
|
};
|
|
|
|
}
|