nix machine / user configurations

feat(wolumonde): enable deploy webhook again

ptr.pet 592893fb ba8ae055

verified
Changed files
+35 -28
hosts
wolumonde
modules
secrets
+7 -3
hosts/wolumonde/modules/webhook.disabled/default.nix hosts/wolumonde/modules/webhook.nix/default.nix
···
-
{ config, tlib, ... }:
-
{
+
{ config, tlib, ... }: let
+
domain = "webhook.gaze.systems";
+
in {
imports = tlib.importFolder ./.;
services.webhook = {
···
group = "nginx";
};
-
services.nginx.virtualHosts."webhook.gaze.systems" = {
+
security.acme.certs."gaze.systems".extraDomainNames = [domain];
+
services.nginx.virtualHosts.${domain} = {
useACMEHost = "gaze.systems";
forceSSL = true;
+
kTLS = true;
+
quic = true;
basicAuthFile = config.age.secrets.webhookAuth.path;
locations."/" = {
proxyPass = "http://localhost:${toString config.services.webhook.port}";
-10
hosts/wolumonde/modules/webhook.disabled/deploy-wolumonde.nix
···
-
{ pkgs, ... }:
-
{
-
services.webhook.hooks."deploy-wolumonde" = {
-
execute-command = "${pkgs.curl}/bin/curl";
-
pass-arguments-to-command = builtins.map (n: {
-
source = "string";
-
name = n;
-
}) [ "http://higashi:9000/hooks/deploy-wolumonde" ];
-
};
-
}
+13
hosts/wolumonde/modules/webhook.nix/deploy-wolumonde.nix
···
+
{ pkgs, ... }:
+
{
+
services.webhook.hooks."deploy-wolumonde" = {
+
execute-command = "${pkgs.curl}/bin/curl";
+
pass-arguments-to-command =
+
builtins.map
+
(n: {
+
source = "string";
+
name = n;
+
})
+
[ "http://higashi:9000/hooks/deploy-wolumonde" ];
+
};
+
}
+15 -15
secrets/webhookAuth.age
···
age-encryption.org/v1
-> ssh-rsa Abmvag
-
yAzk1FDMr4p5HwJ5x0sFA5/bSyq5pWzrSo3NJTLkXsrQC/1gMCdT4scPnjxnuJBs
-
q52MGu8qzBAdKpoVw88JHs51gYSoOnP8Is0eHiR1VpEOzu2/j5cdwzurrkvMxC/D
-
N66ELc4nZWX3u4opqyIKKfEMADv6W9QDU8fWldOhh8pR5dX0j69ifOyFsC9M6xWB
-
wt6OHfQq/E89LiaenWxl4bJJLq0Mv2Oqoz3gzxZkaBscwj55sGxT1KRYXoPMXKxT
-
c+Mr7X0vH2+998JP7Wc1LAmOz+YAQtNs5LzaiaNPEtrmIcxVKuDcL1AFpYvskPZ1
-
rxRtZqYJV3HjTHtfhYyFr0qK4SGTiGL8CaNO/cPTs2oiLbtpS8SK8TJ7J3rnD1mh
-
A+o9fEppSGuGOgEl4SVEexPkv5vZYcnwrNK4Ymm4jxUx/aGIxPpUBcHP1fFhB3ux
-
80pkJItXb5vgOZN1NGu/Csh3BqPhh1golhvoQPlRN8vNDmIUwN0ZzzYM91egEHs9
-
rjyoGEcfiDbO27F196ycVAj34GJvIWvzQU/XiJ0O0B1xigzq4wNkeCXDoccT7BGC
-
b8Rz0h7WzXSKC0EJ9hW1YpTfT1igzDpYOpIDncPTwixV0bH9F3gZYj6ZdMa/qqKM
-
h2TGmjbwjQoZF/GM9srKBn73dxA0U5TXLDpRiWtkq94
-
-> ssh-ed25519 KjIL7g mbpMiqqe3B5jTeboKSdirFLPRv8NwNCL9CJgL/s3NBE
-
p+iUXKjIEB2kjltx8Y0OafGdLshcPO7uLEsG1qa7yCc
-
--- 73pC0uFLSJvcUIdTwTOwVwXEPzxuA5mmiD5SKJiJmeM
-
��[}&K*g�j�;�V�:��~�6�\q�m>'�X |�2�̻�@��I�PΒqɋݦ^�C�~8�щ6e�=��O���X|Ȱ�T����v��ckD�
+
tZQpEZGaxBAguq42O3bbAm/n0HIvQpSUGI7WG+EK1saehatjvCKz943/w3p2Fg6q
+
XlrW6du6PkD6dx+IRilU9gxRkUbQ980Fe7YkGMLpQpg8VtbDgvarcF4wqiheCRYR
+
jwjdg3NpxP1N9lF6GDeHzKveKQlsk4zlDFSqQm/Z7MfZ0FCUata5KF6O3R03jnqP
+
3eUI4g5PawwR0ifAIgXfLOtqdWMBOUYGVwHxSPCl9Ej9T64YAA2MAl0v4H0l/8Up
+
YIZQeHXCrwu8GedSKB/5Txycfh7VKaEPEW4Gmq9XuOYzxTjE7//SaHqa3mTFOzWL
+
sXAJUf5zivQ4rmCw/kxhRTi1fGgbJ4tHggkqx5+pQmFh/5YLngPeYenkMgwfllDK
+
eGKpTvr7OhmIUD9P4NuU3iIMQNF1PyQQjTBKHmTS0jXt7C29LfVT6gJ12j3v4N4H
+
Tp7Saqe6I43J1/dnp4ia7rOnztHJdEadZu9IvEooeQ/RTl8sOCyis3dbHUZtCBYZ
+
+qxsGEqa66XoooofMrD9o3NExcNe+xSan/1q/H0qp5jCZlWfmYdafYzoKmv8Ww45
+
k7bktFrleFzjc0hVchx4N/Rb+JgrHCxewwB60UtND7texaNYby6VTO/m8A3je1Uo
+
wLmIkpyOMhjaW+qvnYH7agWCBd1bTLOD1RvzGTEY5gE
+
-> ssh-ed25519 KjIL7g 2V4ItOmfSsbtLZp00Gm/r9H0f+k+mAr+5GUbkKsUHyU
+
k9jKx7HBmXnDFkJk5fCccs6KbQQE7cd3KQDq4yeutQU
+
--- t5dl05mvDzgKtCxG4ATzeoVm8PySg3WvGBPkFxWFyrw
+
�.�3&?�����l�^F�n,�>��5΄B�V�����)@���X�[�G}���G���v�n�������t4-F�q��9#¿�&2ڋщC�„ɡ