93 lines
2.8 KiB
Nix
93 lines
2.8 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
{
|
|
services.gitea = {
|
|
enable = true;
|
|
appName = "Rust Community Matrix Homeserver";
|
|
domain = "gitea.community.rs";
|
|
rootUrl = "https://gitea.community.rs";
|
|
database = {
|
|
type = "sqlite3";
|
|
};
|
|
httpPort = 3001;
|
|
settings = {
|
|
ui = {
|
|
DEFAULT_THEME = "arc-green";
|
|
};
|
|
service = {
|
|
DISABLE_REGISTRATION = lib.mkForce true;
|
|
};
|
|
repository = {
|
|
DEFAULT_BRANCH = "trunk";
|
|
};
|
|
};
|
|
lfs.enable = true;
|
|
};
|
|
# Setup the docker networking for woodpecker
|
|
systemd.services.init-woodpecker-network-and-files = {
|
|
description = "Create the network bridge woodpecker-br for filerun.";
|
|
after = [ "network.target" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
before = [ "docker-woodpecker-server" ];
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
script =
|
|
let dockercli = "${config.virtualisation.docker.package}/bin/docker";
|
|
in
|
|
''
|
|
# Put a true at the end to prevent getting non-zero return code, which will
|
|
# crash the whole service.
|
|
check=$(${dockercli} network ls | grep "woodpecker-br" || true)
|
|
if [ -z "$check" ]; then
|
|
${dockercli} network create woodpecker-br
|
|
else
|
|
echo "woodpecker-br already exists in docker"
|
|
fi
|
|
'';
|
|
};
|
|
# Setup woodpecker
|
|
virtualisation.oci-containers.containers = {
|
|
woodpecker-server = {
|
|
image = "woodpeckerci/woodpecker-server:latest";
|
|
ports = [ "8000:8000" ];
|
|
volumes = [ "woodpecker-server-data:/var/lib/drone" ];
|
|
environment = {
|
|
WOODPECKER_OPEN = "true";
|
|
WOODPECKER_GITEA = "true";
|
|
WOODPECKER_HOST = "https://woodpecker.community.rs";
|
|
WOODPECKER_GITEA_URL = "https://gitea.community.rs";
|
|
WOODPECKER_LIMIT_CPU_QUOTA = "200001";
|
|
WOODPECKER_LIMIT_MEM = "2147483648";
|
|
WOODPECKER_ADMIN = "thatonelutenist";
|
|
WOODPECKER_ENVIRONMENT = "SCCACHE_REDIS:redis://172.23.108.12";
|
|
};
|
|
environmentFiles = [ "/var/lib/secret/woodpecker-server" ];
|
|
extraOptions = [ "--network=woodpecker-br" ];
|
|
};
|
|
woodpecker-agent = {
|
|
image = "woodpeckerci/woodpecker-agent:latest";
|
|
dependsOn = [ "woodpecker-server" ];
|
|
volumes = [ "/var/run/docker.sock:/var/run/docker.sock" ];
|
|
environment = {
|
|
WOODPECKER_SERVER = "woodpecker-server:9000";
|
|
WOODPECKER_MAX_PROCS = "1";
|
|
};
|
|
environmentFiles = [ "/var/lib/secret/woodpecker-agent" ];
|
|
extraOptions = [ "--network=woodpecker-br" ];
|
|
};
|
|
};
|
|
|
|
|
|
services.nginx = {
|
|
virtualHosts."gitea.community.rs" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/".proxyPass = "http://localhost:3001";
|
|
};
|
|
virtualHosts."woodpecker.community.rs" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/".proxyPass = "http://localhost:8000";
|
|
};
|
|
};
|
|
}
|