winston/infra
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: winston:3c76d90c4dc750995dfb14b706a333196d537103
Branches Tags
winston:main
...
compare: winston:19824e1e679b75e3bad3bada542399f36dc116be
Branches Tags
winston:main

2 commits
3c76d90c4d ... 19824e1e67

Author SHA1 Message Date
winston
19824e1e67
feat(forgejo): tune runner network
Some checks failed
/ check (push) Has been cancelled
Details
2024-09-18 18:22:37 +02:00
winston
a7212d2be3
feat(ssh): explicitly open firewall 2024-09-18 18:22:22 +02:00
2 changed files with 6 additions and 9 deletions
Show stats Expand all files Collapse all files

2
config/network.nix
View file

@ -8,7 +8,7 @@
}; };
openssh = { openssh = {
enable = true; enable = true;
ports = [ 22 ]; openFirewall = true;
settings = { settings = {
KexAlgorithms = [ KexAlgorithms = [
"curve25519-sha256" "curve25519-sha256"

13
config/services/forgejo.nix
View file

@ -20,9 +20,6 @@ in
"services/forgejo/password-database".owner = config.services.forgejo.user; "services/forgejo/password-database".owner = config.services.forgejo.user;
}; };
# forgejo ssh
networking.firewall.allowedTCPPorts = [ 22 ];
# indexer # indexer
services.elasticsearch.enable = true; services.elasticsearch.enable = true;
@ -119,7 +116,11 @@ in
}; };
}; };
virtualisation.podman.enable = true; virtualisation.podman = {
enable = true;
dockerSocket.enable = true;
defaultNetwork.settings.dns_enabled = true;
};
services.gitea-actions-runner = { services.gitea-actions-runner = {
package = pkgs.unstable.forgejo-runner; package = pkgs.unstable.forgejo-runner;
instances.main = { instances.main = {
@ -128,10 +129,6 @@ in
url = config.services.forgejo.settings.server.ROOT_URL; url = config.services.forgejo.settings.server.ROOT_URL;
tokenFile = config.age.secrets."services/forgejo/runner-token".path; tokenFile = config.age.secrets."services/forgejo/runner-token".path;
labels = [ "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest" ]; labels = [ "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest" ];
settings.container = {
network = "host";
options = "--add-host=forgejo.winston.sh:host-gateway";
};
}; };
}; };