phfroidmont/self-hosting
1
0
Fork 0
mirror of https://github.com/phfroidmont/self-hosting.git synced 2025-12-25 05:36:59 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix gitlab-runner registration

Browse source
This commit is contained in:
Paul-Henri Froidmont 2024-07-08 18:51:24 +02:00
parent 3701d9ba1e
commit 51c5b08985
Signed by: phfroidmont
GPG key ID: BE948AFD7E7873BE
2 changed files with 59 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

96
modules/gitlab-runner.nix
View file

@ -1,7 +1,14 @@
{ config, lib, pkgs, ... }:
{
config,
lib,
pkgs,
...
}:
with lib;
let cfg = config.custom.services.gitlab-runner;
in {
let
cfg = config.custom.services.gitlab-runner;
in
{
options.custom.services.gitlab-runner = {
enable = mkEnableOption "gitlab-runner";
};
@ -33,52 +40,61 @@ in {
};
};
config = let hostConfig = config;
in args@{ config, ... }: {
config =
let
hostConfig = config;
in
args@{ config, ... }:
{
nix = {
package = pkgs.nixVersions.latest;
extraOptions = ''
experimental-features = nix-command flakes
nix = {
package = pkgs.nixVersions.latest;
extraOptions = ''
experimental-features = nix-command flakes
'';
};
environment.systemPackages = with pkgs; [
git
htop
nload
];
users.groups.gitlab-runner = { };
users.users.gitlab-runner = {
isSystemUser = true;
group = config.users.groups.gitlab-runner.name;
};
programs.ssh.extraConfig = ''
StrictHostKeyChecking=no
UserKnownHostsFile=/dev/null
'';
};
environment.systemPackages = with pkgs; [ git htop nload ];
networking.useHostResolvConf = lib.mkForce false;
users.groups.gitlab-runner = { };
users.users.gitlab-runner = {
isSystemUser = true;
group = config.users.groups.gitlab-runner.name;
};
programs.ssh.extraConfig = ''
StrictHostKeyChecking=no
UserKnownHostsFile=/dev/null
'';
services = {
openssh.enable = true;
gitlab-runner = {
enable = true;
services = {
shell = {
registrationConfigFile =
hostConfig.sops.secrets.runnerRegistrationConfig.path;
executor = "shell";
tagList = [ "nix" ];
services = {
openssh.enable = true;
resolved.enable = true;
gitlab-runner = {
enable = true;
services = {
shell = {
authenticationTokenConfigFile = hostConfig.sops.secrets.runnerRegistrationConfig.path;
executor = "shell";
};
};
};
};
};
systemd.services.gitlab-runner.serviceConfig = {
DynamicUser = lib.mkForce false;
User = config.users.users.gitlab-runner.name;
Group = config.users.groups.gitlab-runner.name;
};
systemd.services.gitlab-runner.serviceConfig = {
DynamicUser = lib.mkForce false;
User = config.users.users.gitlab-runner.name;
Group = config.users.groups.gitlab-runner.name;
};
system.stateVersion = "22.05";
};
system.stateVersion = "22.05";
};
};
};
}