summaryrefslogtreecommitdiff
path: root/hosts/p-body/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/p-body/default.nix')
-rw-r--r--hosts/p-body/default.nix22
1 files changed, 8 insertions, 14 deletions
diff --git a/hosts/p-body/default.nix b/hosts/p-body/default.nix
index e4368b4..4b00177 100644
--- a/hosts/p-body/default.nix
+++ b/hosts/p-body/default.nix
@@ -3,16 +3,13 @@
guzzle_api,
modulesPath,
pkgs,
- self,
...
}: {
imports = [
(modulesPath + "/virtualisation/digital-ocean-image.nix")
./buildMachines.nix
- ./cachix.nix
./forgejo.nix
./grafana.nix
- ./hydra.nix
./loki.nix
./nginx.nix
./prometheus.nix
@@ -26,24 +23,20 @@
hermetic = false;
};
- age.secrets.authGH = {
- file = "${self}/secrets/hosts/${config.networking.hostName}/authGH.age";
- mode = "440";
- owner = config.users.users.root.name;
- inherit (config.users.users.hydra) group;
- };
+ getchoo.server = {
+ secrets.enable = true;
- getchoo.server.secrets.enable = true;
+ services.hercules-ci = {
+ enable = true;
+ secrets.enable = true;
+ };
+ };
networking = {
domain = "mydadleft.me";
hostName = "p-body";
};
- nix.extraOptions = ''
- !include ${config.age.secrets.authGH.path}
- '';
-
services = {
guzzle-api = {
enable = true;
@@ -68,6 +61,7 @@
];
in {
root = {inherit openssh;};
+
p-body = {
extraGroups = ["wheel"];
isNormalUser = true;