xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions 1

things

Browse source
This commit is contained in:
XenGi 2026-08-01 01:02:32 +02:00
commit a8964d8004
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
4 changed files with 25 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

10
hosts/git/forgejo-runner.nix
View file

@ -3,10 +3,10 @@
{ {
services.gitea-actions-runner = { services.gitea-actions-runner = {
package = pkgs.forgejo-runner; package = pkgs.forgejo-runner;
instances.yuka = { instances.snowden = {
enable = true; enable = true;
name = "yuka"; name = "snowden";
url = "https://git.sb20.xengi.de"; url = "https://git.berlin.ccc.de";
labels = [ labels = [
"debian-stable:docker://docker.io/debian:stable-slim" "debian-stable:docker://docker.io/debian:stable-slim"
"alpine-latest:docker://docker.io/alpine:latest" "alpine-latest:docker://docker.io/alpine:latest"
@ -38,8 +38,8 @@
}; };
}; };
server.connections.forgejo = { server.connections.forgejo = {
url = "https://git.sb20.xengi.de/"; url = "https://git.berlin.ccc.de/";
uuid = "f16ffc21-eb17-4595-ba54-eac00a6f1fa4"; uuid = "7fd3683e-1bc1-429f-8467-e6d27044eb91";
token_url = "file://${config.age.secrets.forgejo-runner-token.path}"; token_url = "file://${config.age.secrets.forgejo-runner-token.path}";
}; };
container = { container = {

2
hosts/monitoring/prometheus.nix
View file

@ -48,6 +48,7 @@
"sql.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}" "sql.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}"
"monitoring.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}" "monitoring.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}"
"www.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}" "www.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}"
"dav.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}"
"git.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}" "git.${config.networking.domain}:${toString config.services.prometheus.exporters.node.port}"
"mqtt.club.berlin.ccc.de:9100" "mqtt.club.berlin.ccc.de:9100"
"forgejo-runner.club.berlin.ccc.de:9100" "forgejo-runner.club.berlin.ccc.de:9100"
@ -65,6 +66,7 @@
"md.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}" "md.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}"
"monitoring.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}" "monitoring.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}"
"www.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}" "www.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}"
"dav.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}"
"git.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}" "git.${config.networking.domain}:${toString config.services.prometheus.exporters.nginx.port}"
]; ];
} }

36
secrets/forgejo-runner-token-snowden-env.age
View file

@ -1,19 +1,19 @@
age-encryption.org/v1 age-encryption.org/v1
-> ssh-ed25519 uH+n1w OqZFs/+8RfQcxHVYYhsTuOllqYz8vC1VVHv64y0oKxI -> ssh-ed25519 uH+n1w +KvGqAaNROyE3bbbjwH5UlsC8EEuJsVkvCx58ac+sE4
5hgPS2Y3pXDbs01Wi8772mHXJjeQaVryYBKEgtKxmBk E+ZptaFcETE4hYPeHeLTN6Nv15dURwEyvpnkTAZC3y0
-> ssh-ed25519 EvLbWw 3Kt46VGnY4ReeMRfnfoGxFxPdNw2G0NTk5UDQX4bC0I -> ssh-ed25519 EvLbWw 7SaKZybSLPBWWR5c7x+77I+3o2VSoAWXEkM402guJzw
J4eJ85bq9bTsrqbXK35TqOI/dEQgB0Om+a6G/kTx9dM i/2BmlC/w4AwQ9FXRPkUF4IqWjDrQIYupNtwa5FTr48
-> ssh-ed25519 dM+fLQ lXxgeNxLNDI85LU54gGzxrtGmS3wvJiIWyEQWZ/TGgA -> ssh-ed25519 dM+fLQ ihhDunwhNoIzkgFu+GlyFXmpFnh7CPUdbqHZG1GrBk0
jJFc4D52KwQyaR6ghLbWL2VEtbAfHSh2gSs6JkIbtUA 2kuiVHb5xR2dZR2K3hnxEE27W8ZTULKSg7jI7Tq1AR0
-> ssh-ed25519 jxWM2Q 4N/Q36JyktmQIiZnuZxen0ihw4M+GlraSbvnH9fdcAs -> ssh-ed25519 jxWM2Q v6m2gYWR59bnMT0+5bJ6is0n1v+erNJIIdReaxzdYiI
n9cJai680IXvkcy1yItOiBZkNL57E4mlU/98Og8P9a4 IYL86COa5MQG9hFGadaMbr7tphadgsckYvchf3B1rVU
-> ssh-ed25519 /yCUCg odaQ9dbiqNlcATWIOPuyxjjZDp6nBgpKNk0cTNDpHC4 -> ssh-ed25519 /yCUCg z1FrBS/4kUxxOQl1BWcSQczVhrQ3r/zswGhR1MIBNWo
tT67245DfpegikJT63VVTQwpaqREW440C6Y7tGW8iEo 8Ivi+R3gThGkSQe4QmyFIurExpRZCyDjwVNKSYe/fDo
-> ssh-ed25519 FGp51g Ai1mFU3StdHeNxsuShhv9pENTI5u1ZZ3F/D2RkPDmUU -> ssh-ed25519 FGp51g afHNk8lS2oJWDa5YmokpE+kD30eeSZfGb8VFc0r/H2A
RLsCuQCPThwuLRWD3BY0zoYNMH66DMPeXf3N+T2D1N4 pDaCkHvgFeNn3X/wDPe3yAPRV+L/g64dXEEpN+85h10
-> ssh-ed25519 b5OiTQ qRrLha5yq6pTIJcHso5wc4TS2Jt958t5mNQVuexlkks -> ssh-ed25519 b5OiTQ I9iDVd4KcKpH+nwFNeyGSMIegsux2rDzuB+LnIYCBgk
64vDXNC9I6TlO1Pvho0Nuj9Nxh56vS8y5Wnwv+r+/MM BbptMjkV3HIisjidsfPBYLU1J1vna2QpWPiR+hkiBe0
-> ssh-ed25519 HaNCag TTizYb1Kw+boj0RQvrf/rwsjxmhzfg64YFCNL3umhms -> ssh-ed25519 HaNCag BUbf27o6Ph2p78kpaZO7CsCtpd6wxcBIGk4kUidsrzE
MrsSQ9ukFHCCkzgu9J+HgYcP/2MHRaGA+OkwK6/YxW0 VoFu53x9AGdLDFei5C6D3Oa9UKBEdfxNh+5Nc3gGANw
--- kvXDCI+iHRpiJRjWfrK9omFndjVw33CH2pHthv3zrjw --- yCHltWgEm8iJbqSTj4sd6MEkUc/KCSQCOvCqWoYgxl8
ò?½í 7GŠw½©2c8 _¤<5F>Á7ß²cX•þBÓü¹ü«Ã"|ç: îvSîZÂ#Ò¹à¤àFY fÊ‹«Ê¤ý÷Àp%ÀI熥Š¢³“À<E2809C>îEÄÙÀSœjû8NMdm5‡šNádüD Rø¢Ð’`d\7ñ„Æì»’

BIN
secrets/forgejo-runner-token-snowden.age
View file

Binary file not shown.