rarias/jungle
2
0
Fork 3
Code Issues 57 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Reorganize secrets and ssh keys

Browse Source 
The agenix tools needs to read the secrets from a standalone file, but
we also need the same information for the SSH keys.
This commit is contained in:
Rodrigo Arias
2023-09-04 21:36:31 +02:00
parent 1f32b8409a
commit 8a027d8b09
11 changed files with 87 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
m/hut/gitlab-runner.nix
View File

@@ -1,15 +1,15 @@
{ pkgs, lib, config, ... }:
{
age.secrets."secrets/ovni-token".file = ./secrets/ovni-token.age;
age.secrets."secrets/nosv-token".file = ./secrets/nosv-token.age;
age.secrets.ovniToken.file = ../../secrets/ovni-token.age;
age.secrets.nosvToken.file = ../../secrets/nosv-token.age;
services.gitlab-runner = {
enable = true;
settings.concurrent = 5;
services = {
ovni-shell = {
registrationConfigFile = config.age.secrets."secrets/ovni-token".path;
registrationConfigFile = config.age.secrets.ovniToken.path;
executor = "shell";
tagList = [ "nix" "xeon" ];
environmentVariables = {
@@ -17,7 +17,7 @@
};
};
ovni-docker = {
registrationConfigFile = config.age.secrets."secrets/ovni-token".path;
registrationConfigFile = config.age.secrets.ovniToken.path;
dockerImage = "debian:stable";
tagList = [ "docker" "xeon" ];
registrationFlags = [ "--docker-network-mode host" ];
@@ -27,7 +27,7 @@
};
};
nosv-docker = {
registrationConfigFile = config.age.secrets."secrets/nosv-token".path;
registrationConfigFile = config.age.secrets.nosvToken.path;
dockerImage = "debian:stable";
tagList = [ "docker" "xeon" ];
registrationFlags = [