diff options
Diffstat (limited to 'modules/nixos/mixins')
| -rw-r--r-- | modules/nixos/mixins/default.nix | 1 | ||||
| -rw-r--r-- | modules/nixos/mixins/hercules.nix | 55 |
2 files changed, 0 insertions, 56 deletions
diff --git a/modules/nixos/mixins/default.nix b/modules/nixos/mixins/default.nix index bb69bf8..2d8def1 100644 --- a/modules/nixos/mixins/default.nix +++ b/modules/nixos/mixins/default.nix @@ -5,7 +5,6 @@ ./comin.nix ./forgejo.nix ./gnome.nix - ./hercules.nix ./kanidm.nix ./lanzaboote.nix ./nginx.nix diff --git a/modules/nixos/mixins/hercules.nix b/modules/nixos/mixins/hercules.nix deleted file mode 100644 index de209a3..0000000 --- a/modules/nixos/mixins/hercules.nix +++ /dev/null @@ -1,55 +0,0 @@ -{ - config, - lib, - unstable, - secretsDir, - ... -}: -let - cfg = config.mixins.hercules-ci; -in -{ - options.mixins.hercules-ci = { - enable = lib.mkEnableOption "Hercules CI mixin"; - manageSecrets = lib.mkEnableOption "automatic management of secrets" // { - default = config.traits.secrets.enable; - defaultText = lib.literalExpression "config.traits.secrets.enable"; - }; - }; - - config = lib.mkIf cfg.enable ( - lib.mkMerge [ - { - services.hercules-ci-agent = { - enable = true; - # we want newer features - package = unstable.hercules-ci-agent; - }; - } - - ( - let - secretNames = [ - "binaryCaches" - "clusterJoinToken" - "secretsJson" - ]; - in - lib.mkIf cfg.manageSecrets { - age.secrets = lib.genAttrs secretNames (file: { - file = "${secretsDir}/${file}.age"; - mode = "400"; - owner = "hercules-ci-agent"; - group = "hercules-ci-agent"; - }); - - services.hercules-ci-agent = { - settings = lib.mapAttrs' (name: lib.nameValuePair (name + "Path")) ( - lib.genAttrs secretNames (name: config.age.secrets.${name}.path) - ); - }; - } - ) - ] - ); -} |