steffen/cryodev
1
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

split forgejo-runner into own service file for staged deployment

Browse source 
- Extract forgejo-runner config from forgejo.nix into forgejo-runner.nix
- Move forgejo-runner to stage 2 (requires running Forgejo for token)
- Remove all stage-2 secrets from sops.nix (each service file owns its secrets)
- Update first-install docs with corrected staged deployment flow
- Fixes deployment failure caused by runner crashing with placeholder token
This commit is contained in:
steffen 2026-03-14 12:22:33 +01:00
parent da37a2dce3
commit 4c560abffd
6 changed files with 36 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

8
hosts/cryodev-main/services/sops.nix
View file

@ -13,9 +13,9 @@
sops = {
defaultSopsFile = ../secrets.yaml;
# age.keyFile is not set, sops-nix defaults to using /etc/ssh/ssh_host_ed25519_key
secrets = {
"forgejo-runner/token" = { };
"tailscale/auth-key" = { };
};
# Secrets fuer Stufe-2-Services werden in deren eigenen Dateien definiert:
# forgejo-runner/token -> forgejo-runner.nix
# tailscale/auth-key -> tailscale.nix (via Modul)
};
}