system/nixos/hosts/magenta/services/woodpecker/common.nix

29 lines
738 B
Nix
Raw Normal View History

let
data = import ./data.secret.nix;
inherit (data) userServer userAgent group;
in
{
users.groups.${group} = { };
users.users.${userServer} = {
description = "Woodpecker CI Server";
isSystemUser = true;
createHome = true;
inherit group;
};
users.users.${userAgent} = {
isSystemUser = true;
inherit group;
};
users.groups.docker.members = [ userAgent userServer ];
2023-03-18 16:47:02 +03:00
age.secrets.woodpecker-common-env.file = ../../../../../secrets/woodpecker-common-env.age;
age.secrets.woodpecker-server-env.file = ../../../../../secrets/woodpecker-server-env.age;
age.secrets.woodpecker-docker-config = {
2023-03-18 16:47:02 +03:00
file = ../../../../../secrets/docker-config.json.age;
mode = "440";
inherit group;
};
}