48 lines
1.1 KiB
Nix
48 lines
1.1 KiB
Nix
# Edit this configuration file to define what should be installed on
|
|
# your system. Help is available in the configuration.nix(5) man page, on
|
|
# https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
|
|
|
|
# NixOS-WSL specific options are documented on the NixOS-WSL repository:
|
|
# https://github.com/nix-community/NixOS-WSL
|
|
|
|
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
let
|
|
cfg = config.services.forgejo;
|
|
srv = cfg.settings.server;
|
|
in
|
|
{
|
|
imports = [
|
|
./shared/system.nix
|
|
./shared/dev_user.nix
|
|
./shared/docker.nix
|
|
./shared/ssh.nix
|
|
|
|
./dummy-hardware.nix
|
|
];
|
|
|
|
sops = {
|
|
defaultSopsFile = "./secrets/example.yaml";
|
|
age = {
|
|
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25510_key" ];
|
|
keyFile = "/root/.config/sops/age/keys.txt";
|
|
generateKey = true;
|
|
};
|
|
};
|
|
|
|
users.users = {
|
|
# connection only via ssh key
|
|
pipeline = {
|
|
isNormalUser = true;
|
|
home = "/home/pipeline";
|
|
description = "User used by forgejo runners to connect to this system";
|
|
extraGroups = [ "docker" ];
|
|
openssh.authorizedKeys.keyFiles = [ config.sops.secrets."foo".path ];
|
|
};
|
|
};
|
|
}
|
|
|