summaryrefslogtreecommitdiff
path: root/modules/server/services
diff options
context:
space:
mode:
Diffstat (limited to 'modules/server/services')
-rw-r--r--modules/server/services/default.nix5
-rw-r--r--modules/server/services/hercules.nix61
2 files changed, 0 insertions, 66 deletions
diff --git a/modules/server/services/default.nix b/modules/server/services/default.nix
deleted file mode 100644
index 68271b1..0000000
--- a/modules/server/services/default.nix
+++ /dev/null
@@ -1,5 +0,0 @@
-_: {
- imports = [
- ./hercules.nix
- ];
-}
diff --git a/modules/server/services/hercules.nix b/modules/server/services/hercules.nix
deleted file mode 100644
index 782e5a8..0000000
--- a/modules/server/services/hercules.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{
- config,
- hercules-ci-agent,
- lib,
- pkgs,
- self,
- ...
-}: let
- cfg = config.getchoo.server.services.hercules-ci;
- inherit (lib) mkEnableOption mkIf;
-in {
- options.getchoo.server.services.hercules-ci = {
- enable = mkEnableOption "enable hercules-ci";
- secrets.enable = mkEnableOption "manage secrets for hercules-ci";
- };
-
- config = mkIf cfg.enable {
- age.secrets = let
- baseDir = "${self}/secrets/hosts/${config.networking.hostName}";
- hercArgs = {
- mode = "400";
- owner = "hercules-ci-agent";
- group = "hercules-ci-agent";
- };
- in
- mkIf cfg.secrets.enable {
- binaryCache =
- {
- file = "${baseDir}/binaryCache.age";
- }
- // hercArgs;
-
- clusterToken =
- {
- file = "${baseDir}/clusterToken.age";
- }
- // hercArgs;
-
- secretsJson =
- {
- file = "${baseDir}/secretsJson.age";
- }
- // hercArgs;
- };
-
- environment.systemPackages = [
- hercules-ci-agent.packages.${pkgs.stdenv.hostPlatform.system}.hercules-ci-cli
- ];
-
- services = {
- hercules-ci-agent = {
- enable = true;
- settings = {
- binaryCachesPath = config.age.secrets.binaryCache.path;
- clusterJoinTokenPath = config.age.secrets.clusterToken.path;
- secretsJsonPath = config.age.secrets.secretsJson.path;
- };
- };
- };
- };
-}