lelgenio/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests Projects 2 Releases Packages Wiki Activity Actions

monolith: reduce gitlab runner concurrency, no longer main runner

Browse source
This commit is contained in:
Leonardo Eugênio 2026-06-13 23:25:28 -03:00
parent de117167f2
commit 47f187c3b5
1 changed files with 27 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

45
hosts/monolith/monolith-gitlab-runner.nix
View file

@ -15,27 +15,36 @@ in
virtualisation.docker.enable = true;
services.gitlab-runner = {
enable = true;
settings.concurrent = 4;
settings = {
concurrent = 2;
};
services = {
# runner for building in docker via host's nix-daemon
# nix store will be readable in runner, might be insecure
thoreb-telemetria-nix = mkNixRunner config.sops.secrets."gitlab-runners/thoreb-telemetria-nix".path;
thoreb-itinerario-nix = mkNixRunner config.sops.secrets."gitlab-runners/thoreb-itinerario-nix".path;
# # runner for building in docker via host's nix-daemon
# # nix store will be readable in runner, might be insecure
# thoreb-telemetria-nix = mkNixRunner config.sops.secrets."gitlab-runners/thoreb-telemetria-nix".path;
# thoreb-itinerario-nix = mkNixRunner config.sops.secrets."gitlab-runners/thoreb-itinerario-nix".path;
wopus-gitlab-nix = mkNixRunnerFull {
authenticationTokenConfigFile = config.sops.secrets."gitlab-runners/wopus-gitlab-nix".path;
# nixCacheSshPrivateKeyPath = config.sops.secrets."gitlab-runners/wopus-ssh-nix-cache-pk".path;
# nixCacheSshPublicKeyPath = config.sops.secrets."gitlab-runners/wopus-ssh-nix-cache-pub".path;
};
wopus-gitlab-nix =
(mkNixRunnerFull {
authenticationTokenConfigFile = config.sops.secrets."gitlab-runners/wopus-gitlab-nix".path;
# nixCacheSshPrivateKeyPath = config.sops.secrets."gitlab-runners/wopus-ssh-nix-cache-pk".path;
# nixCacheSshPublicKeyPath = config.sops.secrets."gitlab-runners/wopus-ssh-nix-cache-pub".path;
})
// {
requestConcurrency = 2;
};
default = {
# File should contain at least these two variables:
# `CI_SERVER_URL`
# `CI_SERVER_TOKEN`
authenticationTokenConfigFile = config.sops.secrets."gitlab-runners/docker-images-token".path;
dockerImage = "debian:stable";
dockerPullPolicy = "if-not-present";
};
# default = ({
# # File should contain at least these two variables:
# # `CI_SERVER_URL`
# # `CI_SERVER_TOKEN`
# authenticationTokenConfigFile = config.sops.secrets."gitlab-runners/docker-images-token".path;
# dockerImage = "debian:stable";
# dockerPullPolicy = "if-not-present";
# })
# // {
# requestConcurrency = 4;
# };
};
};
systemd.services.gitlab-runner.serviceConfig.Nice = 10;