Compare commits
2 commits
19824e1e67
...
ea4ad43613
Author | SHA1 | Date | |
---|---|---|---|
ea4ad43613 | |||
2da1c15a3f |
3 changed files with 26 additions and 16 deletions
|
@ -4,6 +4,7 @@
|
|||
./atuin.nix
|
||||
./containers.nix
|
||||
./forgejo.nix
|
||||
./forgejo-runner.nix
|
||||
./freshrss.nix
|
||||
./geoipupdate.nix
|
||||
./minio.nix
|
||||
|
|
25
config/services/forgejo-runner.nix
Normal file
25
config/services/forgejo-runner.nix
Normal file
|
@ -0,0 +1,25 @@
|
|||
{ config, pkgs, ... }:
|
||||
{
|
||||
networking.firewall.trustedInterfaces = [ "podman+" ];
|
||||
|
||||
virtualisation.podman = {
|
||||
enable = true;
|
||||
dockerSocket.enable = true;
|
||||
defaultNetwork.settings = {
|
||||
dns_enabled = true;
|
||||
ipv6_enabled = true;
|
||||
};
|
||||
};
|
||||
|
||||
services.gitea-actions-runner = {
|
||||
package = pkgs.unstable.forgejo-runner;
|
||||
instances.main = {
|
||||
enable = true;
|
||||
name = "main";
|
||||
url = config.services.forgejo.settings.server.ROOT_URL;
|
||||
tokenFile = config.age.secrets."services/forgejo/runner-token".path;
|
||||
labels = [ "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest" ];
|
||||
settings.container.options = "--add-host=${config.services.forgejo.settings.server.DOMAIN}:host-gateway";
|
||||
};
|
||||
};
|
||||
}
|
|
@ -116,22 +116,6 @@ in
|
|||
};
|
||||
};
|
||||
|
||||
virtualisation.podman = {
|
||||
enable = true;
|
||||
dockerSocket.enable = true;
|
||||
defaultNetwork.settings.dns_enabled = true;
|
||||
};
|
||||
services.gitea-actions-runner = {
|
||||
package = pkgs.unstable.forgejo-runner;
|
||||
instances.main = {
|
||||
enable = true;
|
||||
name = "main";
|
||||
url = config.services.forgejo.settings.server.ROOT_URL;
|
||||
tokenFile = config.age.secrets."services/forgejo/runner-token".path;
|
||||
labels = [ "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest" ];
|
||||
};
|
||||
};
|
||||
|
||||
services.nginx.virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = {
|
||||
forceSSL = true;
|
||||
enableACME = false;
|
||||
|
|
Loading…
Reference in a new issue