summaryrefslogtreecommitdiff
path: root/modules/server/services/hercules.nix
diff options
context:
space:
mode:
authorseth <[email protected]>2023-05-08 00:21:41 -0400
committerseth <[email protected]>2023-05-08 00:21:41 -0400
commit9cedd06b8589a5d39a7a85e2efe646a8edebac53 (patch)
tree8884a1238b0586396bc403098e23e78505ab514e /modules/server/services/hercules.nix
parent589c80eb1bcaf76b4a1a7e6f9cdd725fdb04e063 (diff)
modules: merge base and nixos
Diffstat (limited to 'modules/server/services/hercules.nix')
-rw-r--r--modules/server/services/hercules.nix61
1 files changed, 0 insertions, 61 deletions
diff --git a/modules/server/services/hercules.nix b/modules/server/services/hercules.nix
deleted file mode 100644
index 782e5a8..0000000
--- a/modules/server/services/hercules.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{
- config,
- hercules-ci-agent,
- lib,
- pkgs,
- self,
- ...
-}: let
- cfg = config.getchoo.server.services.hercules-ci;
- inherit (lib) mkEnableOption mkIf;
-in {
- options.getchoo.server.services.hercules-ci = {
- enable = mkEnableOption "enable hercules-ci";
- secrets.enable = mkEnableOption "manage secrets for hercules-ci";
- };
-
- config = mkIf cfg.enable {
- age.secrets = let
- baseDir = "${self}/secrets/hosts/${config.networking.hostName}";
- hercArgs = {
- mode = "400";
- owner = "hercules-ci-agent";
- group = "hercules-ci-agent";
- };
- in
- mkIf cfg.secrets.enable {
- binaryCache =
- {
- file = "${baseDir}/binaryCache.age";
- }
- // hercArgs;
-
- clusterToken =
- {
- file = "${baseDir}/clusterToken.age";
- }
- // hercArgs;
-
- secretsJson =
- {
- file = "${baseDir}/secretsJson.age";
- }
- // hercArgs;
- };
-
- environment.systemPackages = [
- hercules-ci-agent.packages.${pkgs.stdenv.hostPlatform.system}.hercules-ci-cli
- ];
-
- services = {
- hercules-ci-agent = {
- enable = true;
- settings = {
- binaryCachesPath = config.age.secrets.binaryCache.path;
- clusterJoinTokenPath = config.age.secrets.clusterToken.path;
- secretsJsonPath = config.age.secrets.secretsJson.path;
- };
- };
- };
- };
-}