aynish/helm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

working towards woodpecker

Browse Source
This commit is contained in:
Anish Lakhwara
2022-12-21 21:42:06 +10:00
parent d2252ae1fe
commit 3bea51a834
4 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/profiles/woodpecker-agent/default.nix
+6 -3
View File
@@ -1,12 +1,15 @@
{ pkgs, config, self, ... }:
{
users.users.woodpecker-runner = {
isSystemUser = true;
group = "woodpecker-runner";
};
users.groups.woodpecker-runner = { };
# Allow the exec runner to write to build with nix
nix.allowedUsers = [ "woodpecker-runner" ];
nix.settings.allowed-users = [ "woodpecker-runner" ];
age.secrets.woodpecker-agent-secret.owner = "woodpecker-runner";
age.secrets.woodpecker-agent-secret.file = "${self}/secrets/woodpecker-agent-secret.age";
systemd.services.woodpecker-runner-exec = {
enable = true;
@@ -55,7 +58,7 @@
"/nix/"
];
EnvironmentFile = [
# /run/agenix/woodpecker-agent-secret
/run/agenix/woodpecker-agent-secret
];
ExecStart = "${pkgs.woodpecker-agent}/bin/woodpecker-agent";
User = "woodpecker-runner";