more woodpecker updates
This commit is contained in:
@@ -3,6 +3,8 @@
|
||||
users.users.woodpecker-runner = {
|
||||
isSystemUser = true;
|
||||
group = "woodpecker-runner";
|
||||
home = "/var/lib/woodpecker";
|
||||
createHome = true;
|
||||
};
|
||||
users.groups.woodpecker-runner = { };
|
||||
# Allow the exec runner to write to build with nix
|
||||
@@ -33,15 +35,19 @@
|
||||
];
|
||||
serviceConfig = {
|
||||
Environment = [
|
||||
"WOODPECKER_RUNNER_CAPACITY=2"
|
||||
"WOODPECKER_RUNNER_CAPACITY=6"
|
||||
"WOODPECKER_RUNNER_NAME=woodpecker-agent"
|
||||
"WOODPECKER_SERVER=https://ci.sealight.xyz/"
|
||||
"WOODPECKER_HOSTNAME=mossnet"
|
||||
"WOODPECKER_BACKEND=local"
|
||||
"NIX_REMOTE=daemon"
|
||||
"PAGER=cat"
|
||||
];
|
||||
BindPaths = [
|
||||
"/nix/var/nix/daemon-socket/socket"
|
||||
"/run/nscd/socket"
|
||||
# "/var/lib/woodpecker"
|
||||
"/var/lib/woodpecker"
|
||||
"/var/empty/usr"
|
||||
];
|
||||
BindReadOnlyPaths = [
|
||||
"/etc/passwd:/etc/passwd"
|
||||
|
||||
Reference in New Issue
Block a user