nixos-config/system/monolith-gitlab-runner.nix

25 lines
744 B
Nix
Raw Normal View History

{
config,
pkgs,
lib,
...
}:
2023-11-29 17:42:47 -03:00
let
inherit (pkgs.callPackage ./gitlab-runner.nix { }) mkNixRunner;
in
{
2022-10-06 12:49:48 -03:00
boot.kernel.sysctl."net.ipv4.ip_forward" = true;
virtualisation.docker.enable = true;
2022-12-02 14:40:11 -03:00
services.gitlab-runner = {
2022-10-06 12:49:48 -03:00
enable = true;
2022-12-02 14:40:11 -03:00
settings.concurrent = 4;
2022-10-06 12:49:48 -03:00
services = {
2023-02-24 12:37:35 -03:00
# runner for building in docker via host's nix-daemon
# nix store will be readable in runner, might be insecure
2023-11-29 17:42:47 -03:00
thoreb-telemetria-nix = mkNixRunner config.age.secrets.gitlab-runner-thoreb-telemetria-registrationConfigFile.path;
thoreb-itinerario-nix = mkNixRunner config.age.secrets.monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.path;
2022-10-06 12:49:48 -03:00
};
};
2022-11-05 09:48:46 -03:00
systemd.services.gitlab-runner.serviceConfig.Nice = 10;
2022-10-06 12:49:48 -03:00
}