summaryrefslogtreecommitdiff
path: root/os/kay
diff options
context:
space:
mode:
Diffstat (limited to 'os/kay')
-rw-r--r--os/kay/configuration.nix1
-rw-r--r--os/kay/modules/github-runner.nix14
-rw-r--r--os/kay/secrets.yaml7
3 files changed, 19 insertions, 3 deletions
diff --git a/os/kay/configuration.nix b/os/kay/configuration.nix
index d51d24f..368fa88 100644
--- a/os/kay/configuration.nix
+++ b/os/kay/configuration.nix
@@ -15,6 +15,7 @@
./modules/sshfwd.nix
./modules/home-assistant.nix
./modules/postgresql.nix
+ ./modules/github-runner.nix
];
boot.consoleLogLevel = 3;
diff --git a/os/kay/modules/github-runner.nix b/os/kay/modules/github-runner.nix
new file mode 100644
index 0000000..4462ff2
--- /dev/null
+++ b/os/kay/modules/github-runner.nix
@@ -0,0 +1,14 @@
+{ config, ... }: let
+ secret_path = "misc/nocodb-runner-registration-token";
+ repo = "nocodb/nocodb";
+in {
+ sops.secrets.${secret_path} = {};
+
+ services.github-runners.kay = {
+ enable = true;
+ noDefaultLabels = true;
+ extraLabels = [ "nix" ];
+ tokenFile = config.sops.secrets.${secret_path}.path;
+ url = "https://github.com/${repo}";
+ };
+}
diff --git a/os/kay/secrets.yaml b/os/kay/secrets.yaml
index 7346605..037f55c 100644
--- a/os/kay/secrets.yaml
+++ b/os/kay/secrets.yaml
@@ -16,6 +16,7 @@ mail.sinanmohd.com:
password: ENC[AES256_GCM,data:w8kc2CJwab7qTFQeejXCjUBkfHSKhec9YTpCPjT8,iv:lj634vQoWcrJlc+lh9GL+Co/T+QPln8NHOZoT3ky3EU=,tag:gAeD4EjE4uQFCRM4I5ZakQ==,type:str]
misc:
wireguard: ENC[AES256_GCM,data:kbUtxJv3xSmikJWgtu87TSo5N8tUb2BiH3dH3oOV36waYyXI3bp2aBeAl1k=,iv:yB4UIyMDNRS+JmSnt9XuBhNRTLz+k0FqkK4ofjosRto=,tag:BDSD9SfQuQppKT4+6Cu65w==,type:str]
+ nocodb-runner-registration-token: ENC[AES256_GCM,data:y0uIMS8Vi0nvicfKPtb1dY97Q0R6DrXNzogz5LM=,iv:OTcJO3CM2fj8xziOfrcOGrcKvQuFEhOc3fp7vYh2c/0=,tag:JjWHPwPE+IiTPVo9HJ3O5A==,type:str]
sops:
kms: []
gcp_kms: []
@@ -40,8 +41,8 @@ sops:
OXgwSml4bkc1dnloNUFsRGFFcXFHc2cK26l2eiKbZUkogmAXoha6HTUs3YFKixYz
bTkpKKyOAIIin3YM975wwvkCuWNG4tbnHBHQFh5JGK2OEyLDXuV7Pg==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-05T11:34:39Z"
- mac: ENC[AES256_GCM,data:gWDUFmyZceCJsQQfyUot5D50KLh9+/wDjsxw4btkq1r7kWOQmYlkwdfAr3ZAHWWP1uhzq0cvP7VuucG3dK5KY/q8j6bkIG4O8RYhecpx7Qnc87z55kt+xUoz/shYJ238iwcX5MpbmL97HHUy4Uqkyi0Fz8vOqoGMsiLcp0OTj2s=,iv:6QeEwCUPCxaUZ445oSrxpe0DkATc/mRjnEWRZcFWE/c=,tag:pf9iU2vp0pcF/2kdKdVy9g==,type:str]
+ lastmodified: "2025-02-05T04:53:03Z"
+ mac: ENC[AES256_GCM,data:zHi+3DU4hFJKCTXGY4TkFStXC5nDJvnxE3U4xTGqaqsL/Czk/HZ2s/Soxfj/08Bd/QEgIvYnxKnKb/ItYxTzWNZIABlA38Ob0UzWz7Ft+ea8BXOlkQo4pWkNxB4Kps93rb59KwQkSKy0m0aGnXGyNm//XtbX+EkZvACpvcW0kMA=,iv:17tFG8/WYTV5yuSTTQQYQACtT6SEA977ObPBUT4zcPE=,tag:0ju/poWwjzrppzaGiiwHZA==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
- version: 3.8.1
+ version: 3.9.3