feat: add gitea act runner

hosts/wolumonde/modules/gitea-act.nix

@@ -0,0 +1,7 @@
+{config, ...}: {
+  services.gitea-actions-runner.instances."thermex" = {
+    url = config.services.gitea.settings.server.ROOT_URL;
+    name = "thermex";
+    tokenFile = config.age.secrets.giteaActRunnerToken.path;
+  };
+}

hosts/wolumonde/modules/limbusart.nix

@@ -33,8 +33,8 @@ in {
   };
   users.groups.limbusart = {};
 
-  services.nginx.virtualHosts."limbus.company" = {
-    useACMEHost = "limbus.company";
+  services.nginx.virtualHosts."limbus.gaze.systems" = {
+    useACMEHost = "gaze.systems";
     forceSSL = true;
     locations."/".proxyPass = "http://localhost:3000";
   };

hosts/wolumonde/modules/nginx.nix

@@ -16,16 +16,12 @@
       webroot = "/var/lib/acme/acme-challenge";
       extraDomainNames = [
         "git.gaze.systems"
-        "matrix.gaze.systems"
         "ms.gaze.systems"
         "mq.gaze.systems"
         "couchdb.gaze.systems"
         "doc.gaze.systems"
+        "limbus.gaze.systems"
       ];
     };
-    certs."limbus.company" = {
-      webroot = "/var/lib/acme/acme-challenge";
-      extraDomainNames = [];
-    };
   };
 }

hosts/wolumonde/modules/secrets.nix

@@ -9,4 +9,5 @@
   age.secrets.musikquadConfig.file = ../../../secrets/musikquadConfig.age;
   age.secrets.tmodloaderServerPass.file = ../../../secrets/tmodloaderServerPass.age;
   age.secrets.websiteConfig.file = ../../../secrets/websiteConfig.age;
+  age.secrets.giteaActRunnerToken.file = ../../../secrets/giteaActRunnerToken.age;
 }

secrets/giteaActRunnerToken.age

@@ -0,0 +1,18 @@
+age-encryption.org/v1
+-> ssh-rsa Abmvag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+-> ssh-ed25519 KjIL7g V3xZRjaCRH0v/sWKWHotb9ltOAL2sdSre7EelYSREjM
+F7cUzDL0eWocx413YiSVCwdoZJg0z/O96nyeViX/aoI
+--- p9mAOLSQos8OocqzUldVpcRosS84iGX4iMiibIOTQaM
+-^wx
T‘ ‹8 ’t>Tû`J<>dÇÊèf˜í]0—~â‡sÁ›±’&µ’¦/Áúã1éÁ$ˆ»õ—·n'
+š%AE_eâ@ô Ð‰h¨¥^

secrets/secrets.nix

@@ -10,4 +10,5 @@ in {
   "nixBuildKey.age".publicKeys = [yusdacra];
   "tmodloaderServerPass.age".publicKeys = [yusdacra wolumonde];
   "websiteConfig.age".publicKeys = [yusdacra wolumonde];
+  "giteaActRunnerToken.age".publicKeys = [yusdacra wolumonde];
 }

shells/default.nix

@@ -19,7 +19,7 @@ tlib.genPkgs (pkgs: let
 in {
   default = mkNakedShell {
     name = "prts";
-    packages = (with pkgs; [git git-crypt alejandra helix rage]) ++ [agenix-wrapped];
+    packages = (with pkgs; [git git-crypt alejandra rage]) ++ [agenix-wrapped];
     shellHook = ''
       echo \"$(tput bold)welcome to PRTS, $USER$(tput sgr0)\"
     '';