commit 57612f8b44157a6f5590f8d960e8cd30ef81c469 · soopy.moe/gensokyo

+2 -13

creds/sops/koumakan/default.yaml

···

       63
       63
        
           token: ENC[AES256_GCM,data:N90DOJ0mip8FuuQD2iHA2OMDIePuM6tddLRLCjgNXpnp4PnRBFgt7UOvY/163DYphRtI/dl6Dl2odlpJ7UDtqYUKmNVtzGUGHLz38XQMCXN4rXnCXQ==,iv:3w5L2p+yQvKxusT3LBG/YXwQMrYhz+km1RuWmr4ZeO8=,tag:YHAHqrgqzq3K0x3XcNizwg==,type:str]

     

       64
       64
        
       searxng:

     

       65
       65
        
           secret: ENC[AES256_GCM,data:u1qFKXn4J21sO5a68/YJq8pWHHk98NINOG7FuwY8+o7M+hNod4vO2Axw1fJPUnDnUdcnEBQ/UUpUuH/DeAjr5HyjuZ1kyzHQYUVhjl8Mp7W7S/R2GCKoIg==,iv:bPKgs0ZAJl7TgNOjTh4aKks5/DHBYdfIemYa9SnfoXg=,tag:KiKf4sKhsi1dtwNFtzhEPw==,type:str]

     

       66
       66
       -
       buildbot:

     

       67
       67
       -
           workers:

     

       68
       68
       -
               renko: ENC[AES256_GCM,data:LIn+7zzhsbEHALPni5SOy86EAp1M8YkhLGmn0G05fz6KxADF+TRpu1EUxmGLOZkwZeMLTTQ8lzNKUomGneLOINICQ+6967TZYcxeaUd0TWxi0hCPXkXw0wT4eXm9vDaXgk0gLvZlF17Q1vkGWJhGiDqI5gKqcvx3HojDvSnCe4UflnZ/CK4P3LDwCCEKdMXgp8Qv/G8Im52nCP9W1ZBSFEhY/DfA8JSHE1p2gQ==,iv:3MSPRmMPVRuHgkf97N+mBNS3SLAdH1TuHSB7em3R2Fo=,tag:arDSGfQkD9dzVLlA66+INA==,type:str]

     

       69
       69
       -
               nijika: ENC[AES256_GCM,data:XrelW0Au0e41Alp2nFF9gWCM2NmmD0bevoJdP24t0ukKU07KzXOw8FXnqDaOcbx12siOzhSDLRp3TCB3CMoY7QNhpP3U2BI0vJxiLp31aipA+zgXaSqivnHjWIyiH/Wf6i6OimrrO3ygtiKK4OTPvQU7zYofjrr02gRKzjqhZuURzrfx9SlzNVQ7NhjgYaeeP7Ht3KeGcLyRIKr0N4yiwfTOcHtBV/7kSH1Q+Q==,iv:fXalFVVlu2FpvsCvXjlag9moYVfUf6utYdumok8fBXQ=,tag:Z2m+/DgCYOONFgRYXwKShQ==,type:str]

     

       70
       70
       -
           gitea:

     

       71
       71
       -
               webhook_secret: ENC[AES256_GCM,data:QZh04722SnJhxtxKNCUD+pnqSTP0fr/B4qj4v6vA7UCm/JH42x7a0yMVi87tATnQsRDX8/5oHWXqtYkskJZigfXs5ptqOqu6lCG88vP4my0gg8Y3017pfA==,iv:sJd8Zzf/Q05srghCABmKW4IARjusYR4VvBxjj9ihKqU=,tag:0Cd01OKVwPCbpMH9qwB+Gw==,type:str]

     

       72
       72
       -
               token: ENC[AES256_GCM,data:CAFVuDHsjwmUxmWfL/bt3FlQk0lllchJOM2UtxbwQjq9B4XLZWSnwg==,iv:wp4xDaBzUOBp91oXRN5S0XM8/ge75SbceD1TmASMB0Y=,tag:eJSGlCCdWeOHIJUDY1dDeQ==,type:str]

     

       73
       73
       -
               client_secret: ENC[AES256_GCM,data:RbL87pLdAnpoKoh1hmvQexnJ8RqCPGscAtGn1eMhzb9SghknzaUxJRtAe6Jz+2S+vrFE/n+BofI=,iv:4QHVMx6NqDg3V+WeQ7dnIgYu6EBD3RTOpCFopH065rU=,tag:AgyXE+hIFFljqHWr/SOsEQ==,type:str]

     

       74
       74
       -
           gh:

     

       75
       75
       -
               webhook_secret: ENC[AES256_GCM,data:nWDjqZcyJunimntZAZooMJCNshHW2o+OouajFcJEcEOEV1mxxwBJu6rrAnnKeVgM9Zw6NEyI94UHJ4PnL+s/h/sLDdt7s/eCSil6dzbX9hRs+f/1ODIgfQ==,iv:phpn4qVtr92Oc2R1cCY4HmZGFGfAg5EQhWXnMMX6uBs=,tag:C/VY/Kzz6oO2CK1kCCcArQ==,type:str]

     

       76
       76
       -
               private_key: ENC[AES256_GCM,data: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,iv:BggfLd6AC8Y2Nov1/a56sJUH+r5gjBjjSGQfZ9Rxe4c=,tag:Yuy8AeRyIcaVif9O/4R+TQ==,type:str]

     

       77
       66
        
       hydra:

     

       78
       67
        
           signing_key:

     

       79
       68
        
               v1: ENC[AES256_GCM,data:Oc1E2MNzUgRZvXm54HmumhomF3M7LIHQl1u/Jta8cdOKmZgB5jSzv8aUeaKa1SOGCtIfVSbsJb7ijKTULtrWOkge6SBtiNYkOAKlvDGXWhChAO4GRFrMyeJgjLFWgY7+OKFicNQwU3uLPA==,iv:j25ZwWmzt7r53CVxJkGia8tSpIUQD7UecQElM+JDJ3w=,tag:zxSvJV3qfius+QwBYbgNrw==,type:str]

     
···

       118
       107
        
                   QUlVNExmVGd2QXJwVmRGa0JvMmtocEUK7Zo0Mtj3oZm5Etp61cGbLs+2XP97pjR6

     

       119
       108
        
                   rtfHnuxceJj0+yBugfwgFD1TGJ+6M7z5YCwTx+GAvbPDrmSm2TGrwg==

     

       120
       109
        
                   -----END AGE ENCRYPTED FILE-----

     

       121
       121
       -
           lastmodified: "2025-03-14T08:26:40Z"

     

       122
       122
       -
           mac: ENC[AES256_GCM,data:GDOnyzEGrX2csDluWpt7Pert/ONV79UoOCOELmz3Piia9wtilxEBvx5LlQiSanr9lVwYN5oEhjPj7MVXEQ1Gz6hHreT9ko6dzowZLhDflGefBmCPK+iMRXTYp3MffHjbM1r8hFJg+u8Yf+9LObIgsCAheHLrSnqsJUIJ1v6V8Yg=,iv:+ymjDQBpdWJAhEjNhxFZszsmmdwV8EXDZ/L4YmOnh6A=,tag:rEFcLm0TEm9AzIatQzzpww==,type:str]

     

       110
       110
       +
           lastmodified: "2025-03-25T02:22:17Z"

     

       111
       111
       +
           mac: ENC[AES256_GCM,data:FCdvrE5aXGioCrx+V8/UKkU7ifgI6VslZuNAzBZlavJ8AnW8pcX+CPodlvK1/0ZK0b4f8XUcJeB2qFI6EXlgxBrlqsSfgTvVg+bGPjD1r4QlNsEP+EFNLJLIw2HZNFURsc2AVsdoqu+Z/YxUkLOq7XIVyg0yoe9zmLGPTebz9DM=,iv:d/BkL8oIEHKGTUTpoKfgBDeog7hV4qs6VwbZWiCXHx8=,tag:FwTeWiICt96OcNVzPEUtRA==,type:str]

     

       123
       112
        
           pgp: []

     

       124
       113
        
           unencrypted_suffix: _unencrypted

     

       125
       114
        
           version: 3.9.4

+2 -4

creds/sops/nijika/default.yaml

···

       2
       2
        
           auth: ENC[AES256_GCM,data:Mxr5/RN/cHbZTlGBMhtZ3qM/gavzdZ5QZm/Z+cWCayCxzer+dk2LV18W/3Fb+k6ylQDuBYoo9PdnwOA20IvRkdnmUPFI5z7dvmG3sFlM79uL5bzXl8E1AncAAWFbrVaFy9ip8O5vo14iMGP4quxIU9GVRYr2L4NI/7Nc8oCSl/kUQil4wIOn46AsCALalwrgPUzyTi1i5+6L/xSE6pXz15GSjy3G2+FhjxIp2g==,iv:IXgBGWvPGVVFg8NAbrnSr/a+E8k+punmkH1sowXXpFo=,tag:b46Xevxomq3ZXqmXFsThWA==,type:str]

     

       3
       3
        
       lego:

     

       4
       4
        
           cf_token: ENC[AES256_GCM,data:qxF3WPZlhX3G,iv:kNFCT0zJype1OrAqngAOsQRp1zxzGIUJfhTBwhACxTs=,tag:Z6W4fKvGQAfi3ATWaTGg8Q==,type:str]

     

       5
       5
       -
       buildbot:

     

       6
       6
       -
           token: ENC[AES256_GCM,data:S02GVtA9CAlevVvzjP/S4NvRK0F/qhc0GWjL75+7nSXAezPwAIla+zt7ErApkz3zwd3WFl92P0ljE9bUlvEiZYjMMsBn4ggQMO6NmzsEFxOnLjhhWA5faX+w32J+UOWxOBSgBoPJG3Q+KxMMJLiieTHbn4Vfp8SzleG9wvqu/MdbCOVa6YRm7IMMMS6Ac1klPJSbSkQLCiRM8VjU/a1da3qwjLgHtDgyLU4W+A==,iv:6l09P+B816Jsyee8OlP0qAm/V9qQ4xLcqI92cRhyx/Q=,tag:4YLQu+7i2aBWoE8Me+1wrw==,type:str]

     

       7
       5
        
       sops:

     

       8
       6
        
           kms: []

     

       9
       7
        
           gcp_kms: []

     
···

       37
       35
        
                   eTNNaUJablhCZ21sUWZHNk5UVmVzMmsKyImtNp3LC/dSsCVEvR2ME9pdtmpOTkQN

     

       38
       36
        
                   AEkzIy1Lbt5mCRCEawwJvQSHATztwjJ/1v24tbiPH5YeP+2C0JwYOg==

     

       39
       37
        
                   -----END AGE ENCRYPTED FILE-----

     

       40
       40
       -
           lastmodified: "2025-02-09T08:51:04Z"

     

       41
       41
       -
           mac: ENC[AES256_GCM,data:XFdQLiSC9andNwHW8DBkfYuJ07eBaRPU3bsdXsT3QZge9fdHTMHMYiVL+yo3uhHuruZp4UWXiA97GZo/R+eN1oenkEjnrrdxl0ntQs60xNrsdZ+hltG25JcYlwRP6U8E9wkHaPTbwbHDBikpCPnUS6rVW+4ngZJrmnMGstPvVd8=,iv:6MgoDofvekrENhWnV4XgVwwFOGPF/mYx1FwT7jY+ZUw=,tag:C8l2A7wDRtt2VG6HRuEL8A==,type:str]

     

       38
       38
       +
           lastmodified: "2025-03-25T02:15:52Z"

     

       39
       39
       +
           mac: ENC[AES256_GCM,data:+VBCgQ/rAYC8YKZDeJQcK263ODAPfT1KiDfniMruHM1fQ0hZSlmHLLUr31HVxGiTWrswnpBEmqbkHCEUKK/zUFx+u0u2fgLHtDgIl2kIs6/JAljJdEsVTbx1+OCt6Q+Dd54ZyFuNEGzzMgWldrR7TEGlB0AjDNGJTI9QynSSX6w=,iv:zWWvxph6uqLdSTgrYax0TFjPIHra1BJkHtR51LLRg0E=,tag:COlo1jHhQ9wsmoxPXbE/vQ==,type:str]

     

       42
       40
        
           pgp: []

     

       43
       41
        
           unencrypted_suffix: _unencrypted

     

       44
       42
        
           version: 3.9.4

+2 -4

creds/sops/renko/default.yaml

···

       1
       1
        
       vmetrics:

     

       2
       2
        
           auth: ENC[AES256_GCM,data:oxbj18DlfPJ+PEdIj6YEdF66ZZNar1l9Mak0Bmqu2AOZWlhCo2aRlrcGfvs7mORplvQmcfh5MwjTqGExjQX4ke28SZ7pszoLMGM3XR2BdedPNsO0KcI/zV19dAL1wijBr1c2qqDJGqqO1P0UzLaUbonl9bskG8L9+lB2pr8aU7z1Unejd/Qq2Ae/3x9Ku82deeP5jGWJkeUae9wADEsBPdbqRbv1bpW5zzmc2A==,iv:x65jPFbodvp3/v09OJ0BIgxMUFOLBkpiKRVMoB8seP4=,tag:wz5UVNBJoSl2994GYjVgpA==,type:str]

     

       3
       3
        
           minio_token: ENC[AES256_GCM,data:2joZcYZKcPv7jAlFP+r2xr1840Nv62vWjgE+VvkaIoYlA0Pjg4HWp8qZyEjeJTIOBvmS91RDgooZ7aOmXtZL7venWeMiMyR8k/58+uic3aNg+u5hen461qfYnseQa5bNv2zxXAMVpJG/cAVbnDAk5L1XIX5+GOnGCHC1BXH+xoyp+5ue3DGKeCitJgDBiuEfg68/UiJnQXGAjFe7ZzZX5NTSeb0ktBkxSKHT/Zk7pfoVjY+nzd0he2LVaLKu/qzmSMs3eew2pCHL2BHX7VmF7fDlDfg=,iv:akHyfu47u5luyfzfyFBrkMVmuw+S89LI0wVKNbbHOnQ=,tag:FFVBVNoY3h42c6fUL/v7oQ==,type:str]

     

       4
       4
       -
       buildbot:

     

       5
       5
       -
           token: ENC[AES256_GCM,data:38NXxDghxuRLPHaDqJ3iUqfewImSNAmMOEcc1+/wt6ser9KKpoO2nZBGrTOJF8DvsHHKYj4hPsBXBRtKVQy2f7eB2RkMjOTWZY/Q9+KgGFy5QEu1YdEPZ897Gk/E6APowQCRfJZ/ExUoxgoUumQSqMy2I++NuPQzlUI10yDDC0HwzLErnfWJDct+XoYdral2OG9GhMI0aglrlLtYHAPG7+dvqGm1N5jhQBrkOw==,iv:yZKW7ssLp+gy204C5ikwh3ivSrEtEl/sH+t17rsaMD0=,tag:umxk8szrR94gDFc7NZP4IA==,type:str]

     

       6
       4
        
       minio:

     

       7
       5
        
           root_user: ENC[AES256_GCM,data:yOb0rhdGKjvFe1vX,iv:cKpsXvA660YL0+ut6cOOmXunFhserBOJslVehITNyog=,tag:7Ak5YnVxlGl7bacFWuoyyg==,type:str]

     

       8
       6
        
           root_pass: ENC[AES256_GCM,data:WR1nmwMZSKyiB+hG9zsYeDIlwLU5evSplS+F8hWnK/F8OdlrUgdgpAr6hHSHNv7k82cOtycKRUq0JlhKFVzQTcjvvGOPt5ftg1lteGJ+Nc0MYm5MHs+jfh3G5M+/9w7wnWgi6pYjWSjGKBPL0pIdR/bTYkzNbPGrYOIqhUjeaKYOXJTF77OypJAkCGijeKcTLkrf0j+5My1k4GiVHWbo09o9EryiJT+YuDdoBw==,iv:wWIk7CuOeN0V1qrICoKNGuXZdbXmK0niFFQvgJJdKNw=,tag:7KS2x+/qkqy5y4LqWNIsVw==,type:str]

     
···

       39
       37
        
                   S2duS3ZmMVZJYW9HOERMc1FadlZIekEKaXDFW+Szv9WlqQMIr6Mc5qYlMyt8M19u

     

       40
       38
        
                   DmMZu5Mzl2bLQK5LQvT/iLktWZZidYKfOuP73HpAFf8iIhYXBOLKMQ==

     

       41
       39
        
                   -----END AGE ENCRYPTED FILE-----

     

       42
       42
       -
           lastmodified: "2025-02-13T19:01:36Z"

     

       43
       43
       -
           mac: ENC[AES256_GCM,data:Mu/FvauwQWX0pVdsgJttlM5o0p0Aeo8iwd2ieKUNuRXo+3oJfjOmjaGarJYX7Y1I3PJ+yGt8jgbWN+P1XA41gI4z8+Qwi5IfLZz9taXZ63TwZLV27N4eLr11LQzx02IC/sliA6Y7uDkhzepb5kyHw03wqBQ7i9OxQ4ppIpvV2hc=,iv:u4jOwfuAxrP2HmNHT8FabrOK3dYzuDKDLocvWdyEg0g=,tag:yg57InQ9kDtDxQhQrA8A3w==,type:str]

     

       40
       40
       +
           lastmodified: "2025-03-25T02:16:32Z"

     

       41
       41
       +
           mac: ENC[AES256_GCM,data:gpy2VdrwuRrcv00wdB5JTxwMelOmoj00Uim754mqGHUMHNpf85e3UJPH5YxzKcchzx1ArV6T1k+US5BwVpuiTJiUwqeusugg7iuzzz1+NNkNC4lQbVsH439a+r6tvNL53VOVu2eLYZLcKJAJOpcSnQ/QjBhqiP1+0hqjXfnz1MY=,iv:a8eSM2QVT75RHu5aw40IrG4pOYvkoSfm5KMlNLwaKCc=,tag:OQ4jpDQFzyDDtb7uzNMc4w==,type:str]

     

       44
       42
        
           pgp: []

     

       45
       43
        
           unencrypted_suffix: _unencrypted

     

       46
       44
        
           version: 3.9.4

-16

docs/src/internal/presets/buildbot.md

···

       1
       1
       -
       # Certificates presets

     

       2
       2
       -
       

     

       3
       3
       -
       ```nix

     

       4
       4
       -
       {...}: {

     

       5
       5
       -
         gensokyo.presets.buildbot = true;

     

       6
       6
       -
       }

     

       7
       7
       -
       ```

     

       8
       8
       -
       

     

       9
       9
       -
       This enables the buildbot worker on the current host.

     

       10
       10
       -
       

     

       11
       11
       -
       This requires the following secrets to be set:

     

       12
       12
       -
       

     

       13
       13
       -
       ```yaml

     

       14
       14
       -
       buildbot:

     

       15
       15
       -
           token: # generate from cloudflare

     

       16
       16
       -
       ```

-1

global/default.nix

···

       17
       17
        
           inputs.catppuccin.nixosModules.catppuccin

     

       18
       18
        
           inputs.lanzaboote.nixosModules.lanzaboote

     

       19
       19
        
           inputs.home-manager.nixosModules.home-manager

     

       20
       20
       -
           inputs.buildbot-nix.nixosModules.buildbot-worker

     

       21
       20
        
           inputs.nix-index-database.nixosModules.nix-index

     

       22
       21
        
       

     

       23
       22
        
           inputs.mystia.nixosModules.arrpc

-21

global/gensokyo/presets/buildbot.nix

···

       1
       1
       -
       {

     

       2
       2
       -
         _utils,

     

       3
       3
       -
         config,

     

       4
       4
       -
         lib,

     

       5
       5
       -
         ...

     

       6
       6
       -
       }: let

     

       7
       7
       -
         secrets = _utils.setupSecrets config {

     

       8
       8
       -
           namespace = "buildbot";

     

       9
       9
       -
           secrets = lib.singleton "token";

     

       10
       10
       -
         };

     

       11
       11
       -
       in

     

       12
       12
       -
         lib.mkIf config.gensokyo.presets.buildbot (lib.mkMerge [

     

       13
       13
       -
           {

     

       14
       14
       -
             services.buildbot-nix.worker = {

     

       15
       15
       -
               enable = true;

     

       16
       16
       -
               masterUrl = "tcp:host=koumakan:port=9989";

     

       17
       17
       -
               workerPasswordFile = secrets.get "token";

     

       18
       18
       -
             };

     

       19
       19
       -
           }

     

       20
       20
       -
           secrets.generate

     

       21
       21
       -
         ])

-2

global/gensokyo/presets/default.nix

···

       1
       1
        
       {lib, ...}: {

     

       2
       2
        
         imports = [

     

       3
       3
       -
           ./buildbot.nix

     

       4
       3
        
           ./vmetrics.nix

     

       5
       4
        
           ./nginx.nix

     

       6
       5
        
           ./certificates.nix

     
···

       8
       7
        
         ];

     

       9
       8
        
       

     

       10
       9
        
         options.gensokyo.presets = {

     

       11
       11
       -
           buildbot = lib.mkEnableOption "buildbot presets";

     

       12
       10
        
           vmetrics = lib.mkEnableOption "vmetrics presets";

     

       13
       11
        
           nginx = lib.mkEnableOption "nginx presets";

     

       14
       12
        
           certificates = lib.mkEnableOption "boilerplate certificate issuing presets";

-1

systems/koumakan/configuration.nix

···

       5
       5
        
           inputs.mystia.nixosModules.bsky-pds

     

       6
       6
        
           inputs.mystia.nixosModules.anubis

     

       7
       7
        
           inputs.hydra.nixosModules.hydra

     

       8
       8
       -
           inputs.buildbot-nix.nixosModules.buildbot-master

     

       9
       8
        
           inputs.knotserver-module.nixosModules.default

     

       10
       9
        
       

     

       11
       10
        
           ./hardware-configuration.nix

-61

systems/koumakan/services/ci/buildbot.nix

···

       1
       1
       -
       {

     

       2
       2
       -
         _utils,

     

       3
       3
       -
         config,

     

       4
       4
       -
         ...

     

       5
       5
       -
       }: let

     

       6
       6
       -
         secrets = _utils.setupSecrets config {

     

       7
       7
       -
           namespace = "buildbot";

     

       8
       8
       -
           secrets = [

     

       9
       9
       -
             "gh/private_key"

     

       10
       10
       -
             "gh/webhook_secret"

     

       11
       11
       -
             "gitea/token"

     

       12
       12
       -
             "gitea/client_secret"

     

       13
       13
       -
             "gitea/webhook_secret"

     

       14
       14
       -
       

     

       15
       15
       -
             "workers/renko"

     

       16
       16
       -
             "workers/nijika"

     

       17
       17
       -
           ];

     

       18
       18
       -
         };

     

       19
       19
       -
         mkWorker = name: cores: {

     

       20
       20
       -
           inherit name cores;

     

       21
       21
       -
           pass = secrets.placeholder "workers/${name}";

     

       22
       22
       -
         };

     

       23
       23
       -
       in {

     

       24
       24
       -
         imports = [

     

       25
       25
       -
           secrets.generate

     

       26
       26
       -
           (secrets.mkTemplate "buildbot.workers.json" (builtins.toJSON [

     

       27
       27
       -
             (mkWorker "renko" 12)

     

       28
       28
       -
             (mkWorker "nijika" 2)

     

       29
       29
       -
           ]))

     

       30
       30
       -
         ];

     

       31
       31
       -
       

     

       32
       32
       -
         services.buildbot-nix.master = {

     

       33
       33
       -
           enable = true;

     

       34
       34
       -
           domain = "ci.soopy.moe";

     

       35
       35
       -
           useHTTPS = true;

     

       36
       36
       -
           admins = ["soopyc"];

     

       37
       37
       -
           accessMode.public = {};

     

       38
       38
       -
           workersFile = secrets.getTemplate "buildbot.workers.json";

     

       39
       39
       -
       

     

       40
       40
       -
           # forges configuration

     

       41
       41
       -
           authBackend = "gitea";

     

       42
       42
       -
           github = {

     

       43
       43
       -
             enable = true;

     

       44
       44
       -
             webhookSecretFile = secrets.get "gh/webhook_secret";

     

       45
       45
       -
             authType.app = {

     

       46
       46
       -
               id = 1135740;

     

       47
       47
       -
               secretKeyFile = secrets.get "gh/private_key";

     

       48
       48
       -
             };

     

       49
       49
       -
           };

     

       50
       50
       -
           gitea = {

     

       51
       51
       -
             enable = true;

     

       52
       52
       -
             tokenFile = secrets.get "gitea/token";

     

       53
       53
       -
             webhookSecretFile = secrets.get "gitea/webhook_secret";

     

       54
       54
       -
             instanceUrl = "https://patchy.soopy.moe";

     

       55
       55
       -
             oauthId = "4c9061a1-2ec9-42bb-a80c-8f3124f13b29";

     

       56
       56
       -
             oauthSecretFile = secrets.get "gitea/client_secret";

     

       57
       57
       -
           };

     

       58
       58
       -
         };

     

       59
       59
       -
       

     

       60
       60
       -
         services.nginx.virtualHosts.${config.services.buildbot-nix.master.domain} = _utils.mkVhost {};

     

       61
       61
       -
       }

-1

systems/koumakan/services/ci/default.nix

···

       1
       1
        
       {...}: {

     

       2
       2
        
         imports = [

     

       3
       3
       -
           ./buildbot.nix

     

       4
       3
        
           ./hydra

     

       5
       4
        
         ];

     

       6
       5
        
       }

-3

systems/nijika/services/buildbot.nix

···

       1
       1
       -
       {...}: {

     

       2
       2
       -
         gensokyo.presets.buildbot = true;

     

       3
       3
       -
       }

-1

systems/nijika/services/default.nix

···

       1
       1
        
       {...}: {

     

       2
       2
        
         imports = [

     

       3
       3
        
           ./fallback_page

     

       4
       4
       -
           ./buildbot.nix

     

       5
       4
        
         ];

     

       6
       5
        
       }

-1

systems/renko/configuration.nix

···

       13
       13
        
             games = true;

     

       14
       14
        
           };

     

       15
       15
        
           presets = {

     

       16
       16
       -
             buildbot = true;

     

       17
       16
        
             vmetrics = true;

     

       18
       17
        
             secureboot = true;

     

       19
       18
        
           };

+1 -1

users/_tester.nix

···

       1
       1
        
       {...}: {

     

       2
       2
       -
         virtualisation.vmVariant.users._tester = builtins.warn "[vm] building tester user..." {

     

       2
       2
       +
         virtualisation.vmVariant.users.users._tester = builtins.warn "[vm] building tester user..." {

     

       3
       3
        
           password = "explode";

     

       4
       4
        
           isNormalUser = true;

     

       5
       5
        
           extraGroups = ["wheel"];