commit 22035d893d0eedbfdb9c90a528e21bdd5aaf99b0 · pyrox.dev/nix

+19

systems/x86_64-linux/marvin/secrets/forgejo-gitgay-runner-token.age

···

       1
       +
       age-encryption.org/v1

     

       2
       +
       -> ssh-ed25519 iqBxIA NtvHYtlP2R1/ySw+0gQk8q1QJcujtjMK9h8BXTLnpFU

     

       3
       +
       5+iRMI+OvjQMSR8TkEO5QXFp0u6De3EVtmt+OttYLAw

     

       4
       +
       -> ssh-rsa fFaiTA

     

       5
       +
       MiYovathZe/ZO/NvHsRTFaAlj8GsHgBcbVkkV9MDoYhacdomegj+J2nQks/j+TbP

     

       6
       +
       zU9BSBMSyzWrYuCi15kISyk962mSc7Gte4nwJvUUiZdWq/Vm2dSLyV57EHBgSXl/

     

       7
       +
       C9DHnS78OgTDn8YeeRviLkJ87LEEPF9yGG2z/YN4i53Cuy8UDQagdpFG4dWjGnQn

     

       8
       +
       hImg4bI99h1coaCf8PfsuLsdumbR6y12rdW0A5cEyhfDoodV9hILGuP9KCtUXNxO

     

       9
       +
       BrxDlpVC5CjUZ1xcz1qgQA8QvKbl7qVitxmr5+1pHwtscaiTufOs4MI+ZxCKwOhJ

     

       10
       +
       VPiy01TesPHR9oua/7Ap4dBOTpKRPb8GyaCVyRvkb4cVIlQNgIYuL3pkB3KOM3Ct

     

       11
       +
       VhvXVgXxB6Gb78gJkBy/uwmnSybfnzjv1z+yA9f8VFBzt+i2kDq8/37Tng9DSVGj

     

       12
       +
       4yS67uYQkT5+OVrcjNwBd3NAguVNNg1PEsIE8SvnLXRmI79gjiMdlmZFTsAl2EZN

     

       13
       +
       2CMUaR9r0O88xhEf7FKQ9CUjZjfZvyhHPaJXADfducaVhB56RCIf3jwtsdFnTzzZ

     

       14
       +
       UMIYJ57Pe8m0ESjzp/8+6wH4MPaMULSJhxnpUJW5y5qqnpvRo1dQiPRkW3Xxjh3H

     

       15
       +
       2ulClJg8m7Tqj/nASJFZkqI7PUxjnAteEUcY2WBRtMA

     

       16
       +
       -> ssh-ed25519 wpmdHA OYK95VOo8jFn31+P4keeW0eJco7PKVE82NQL0U+0f1I

     

       17
       +
       D7O1m8QTLBARYjzUJBBX18Ko62iu7ETDD/CJHptTBf8

     

       18
       +
       --- ku5u3TkIGQvE212JtizdwVoz4B0Jx3wvvPrGFfvihGg

     

       19
       +
       �gL�y+72.O\A�,U&z����y	+�Y��OB=�#��=/���}�@W�xx����	\'��~�x.����5?�X�

+1

systems/x86_64-linux/marvin/secrets/secrets.nix

···

       20
        
         "forgejo-db-pw.age".publicKeys = default;

     

       21
        
         "forgejo-mail-pw.age".publicKeys = default;

     

       22
        
         "forgejo-default-runner-token.age".publicKeys = default;

     

       0
        
       
     

       23
        
         "forgejo-internal-token.age".publicKeys = default;

     

       24
        
         "forgejo-lfs-jwt-secret.age".publicKeys = default;

     

       25
        
         "forgejo-oauth2-jwt-secret.age".publicKeys = default;

···

       20
        
         "forgejo-db-pw.age".publicKeys = default;

     

       21
        
         "forgejo-mail-pw.age".publicKeys = default;

     

       22
        
         "forgejo-default-runner-token.age".publicKeys = default;

     

       23
       +
         "forgejo-gitgay-runner-token.age".publicKeys = default;

     

       24
        
         "forgejo-internal-token.age".publicKeys = default;

     

       25
        
         "forgejo-lfs-jwt-secret.age".publicKeys = default;

     

       26
        
         "forgejo-oauth2-jwt-secret.age".publicKeys = default;

+10

systems/x86_64-linux/marvin/services/git.nix

···

       15
        
           enable = true;

     

       16
        
           tokenFile = age.forgejo-default-runner-token.path;

     

       17
        
         };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       18
        
         services.forgejo = {

     

       19
        
           enable = true;

     

       20
        
           lfs.enable = true;

     
···

       121
        
           };

     

       122
        
           forgejo-default-runner-token = forgejoSecret // {

     

       123
        
             file = ../secrets/forgejo-default-runner-token.age;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       124
        
           };

     

       125
        
           forgejo-internal-token = forgejoSecret // {

     

       126
        
             file = ../secrets/forgejo-internal-token.age;

···

       15
        
           enable = true;

     

       16
        
           tokenFile = age.forgejo-default-runner-token.path;

     

       17
        
         };

     

       18
       +
         services.gitea-actions-runner.instances.gitgay = {

     

       19
       +
           enable = true;

     

       20
       +
           labels = [ "docker:docker://git.gay/gitgay/docker_images:22.04" ];

     

       21
       +
           tokenFile = age.forgejo-gitgay-runner-token.path;

     

       22
       +
           url = "https://git.gay";

     

       23
       +
           name = "marvin-gitgay";

     

       24
       +
         };

     

       25
        
         services.forgejo = {

     

       26
        
           enable = true;

     

       27
        
           lfs.enable = true;

     
···

       128
        
           };

     

       129
        
           forgejo-default-runner-token = forgejoSecret // {

     

       130
        
             file = ../secrets/forgejo-default-runner-token.age;

     

       131
       +
           };

     

       132
       +
           forgejo-gitgay-runner-token = forgejoSecret // {

     

       133
       +
             file = ../secrets/forgejo-gitgay-runner-token.age;

     

       134
        
           };

     

       135
        
           forgejo-internal-token = forgejoSecret // {

     

       136
        
             file = ../secrets/forgejo-internal-token.age;