da219a52ec
Runner on the same host cannot reach Forgejo via the public HTTPS URL during boot (ACME certs not ready, nginx not fully up). Use the local HTTP endpoint instead.
28 lines
509 B
Nix
28 lines
509 B
Nix
{
|
|
config,
|
|
outputs,
|
|
constants,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
outputs.nixosModules.forgejo-runner
|
|
];
|
|
|
|
services.forgejo-runner = {
|
|
enable = true;
|
|
url = "http://127.0.0.1:${toString constants.services.forgejo.port}";
|
|
tokenFile = config.sops.templates."forgejo-runner-token".path;
|
|
};
|
|
|
|
sops.secrets."forgejo-runner/token" = {
|
|
mode = "0400";
|
|
};
|
|
|
|
sops.templates."forgejo-runner-token" = {
|
|
content = ''
|
|
TOKEN=${config.sops.placeholder."forgejo-runner/token"}
|
|
'';
|
|
};
|
|
}
|