infra/modules/nixos/hercules-ci/default.nix
zowoq c896c3e3b5 remove terraform effect and hercules secrets
also move cachix deploy token to repo root secrets
2023-09-16 03:00:18 +00:00

20 lines
473 B
Nix

{ config, ... }:
let
herculesSecret = {
owner = "hercules-ci-agent";
sopsFile = ./secrets.yaml;
};
inherit (config.sops) secrets;
in
{
sops.secrets."binary-caches.json" = herculesSecret;
sops.secrets."cluster-join-token.key" = herculesSecret;
services.hercules-ci-agent = {
enable = true;
settings = {
binaryCachesPath = secrets."binary-caches.json".path;
clusterJoinTokenPath = secrets."cluster-join-token.key".path;
};
};
}