diff --git a/hosts/boron.cx.ts.hillion.co.uk/default.nix b/hosts/boron.cx.ts.hillion.co.uk/default.nix index b2ac799..53526ba 100644 --- a/hosts/boron.cx.ts.hillion.co.uk/default.nix +++ b/hosts/boron.cx.ts.hillion.co.uk/default.nix @@ -46,6 +46,12 @@ ## Custom Services custom = { locations.autoServe = true; + services = { + gitea.actions = { + enable = true; + tokenSecret = ../../secrets/gitea/actions/boron.age; + }; + }; }; ## Enable ZRAM to help with root on tmpfs diff --git a/secrets/gitea/actions/boron.age b/secrets/gitea/actions/boron.age new file mode 100644 index 0000000..51d5832 --- /dev/null +++ b/secrets/gitea/actions/boron.age @@ -0,0 +1,19 @@ +age-encryption.org/v1 +-> ssh-rsa GxPFJQ +O6XXkSIScAPiHbBj6VDHrAzbZjossHPW2AQJtQKkrUmERLABYIZuYFJHk9yH2q2W +uBdO/jKN8slQ/7fzKMRu/1EKNRscc1ufgrCCDWdZicdNPSy7948dx+mVK0ass/US +jnPgn75erR+KLsi8/yNJc12mx6onvVFE0mxFihZobiEdt7FcjSFCV9k2pPtN+1TK +5bKpjyodla+KwSXMGDH7jttvMFXtX5NKda4nYNOM1fHwQ5XCdLti67txcn2y85LV +fuo9Pzu++o6aFOalfufKyflOh8Vk3RrBwCDK81e+YLMVjSGv4ZsiTp5O+sI8dBwR +BqftVb523V4L3FhksG/e7Q +-> ssh-rsa K9mW1w +xUjF7ctBetl6as6/N1dVa+Zkg8EOfOILOMzCNUQVGStJ0cEeC3vi54xwoTxnZqX8 +n2f6wsgcZP203MBX5YJTw8w80WN8WPNYM8IZxdrcSNNuOrPJQbJZkikYGOg8z9/g +7zaSotrxcHrHYR2DM/qsQJRYNQgZn7AKviEPwDNSkiGHzolIHRuAi+e2M891/DzA +k4X5VsYGusM3Lo9ABZvNzX0MEnLxtStl3TwW4i4MgWts4rjcjBAp5ybZPrQLgMf6 +M//FNwBXv2adLSC8oUiTWYKB5l5sTmjNawp1FED3T9WvesKWNY0Tm4KrqJA+Ul2Z +8aoxg/TCjuuypTIaEPm2aQ +-> ssh-ed25519 iWiFbA Zl3LbVd8MHnlj1t4LuAcH13UVwHSJb/wSacM5BkTKHY +vwJ4d2obJPXkgOn44+beKbiKR+qnKvFgkOvotwPDJK8 +--- 2q02v2RlVgBjT3qCe2nAXft976YYbr80qtjw3N9i8Vs +?׍[=GMI (t?o⼍/sP}vr,_3jDJ/;dut;@+ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index e1b4b63..7e8dfd5 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -116,6 +116,7 @@ in "gitea/security_secret_key.age".publicKeys = jake_users ++ [ ts.cx.jorah ]; "gitea/security_internal_token.age".publicKeys = jake_users ++ [ ts.cx.jorah ]; + "gitea/actions/boron.age".publicKeys = jake_users ++ [ ts.cx.boron ]; "gitea/actions/jorah.age".publicKeys = jake_users ++ [ ts.cx.jorah ]; # HomeAssistant Secrets