From 374837754cc5b2dfc5e6e2191ad144d72afa8340 Mon Sep 17 00:00:00 2001 From: Dmitriy Pleshevskiy Date: Fri, 6 Sep 2024 03:12:06 +0300 Subject: [PATCH] host/istal: add renovate bot --- .agenix_config.nix | Bin 5391 -> 5592 bytes flake.nix | 3 +- hosts/istal/services/default.nix | 1 + hosts/istal/services/renovate-gitea-token.age | Bin 0 -> 1290 bytes .../istal/services/renovate-github-token.age | Bin 0 -> 1290 bytes hosts/istal/services/renovate.nix | 46 ++++++++++++++++++ 6 files changed, 49 insertions(+), 1 deletion(-) create mode 100644 hosts/istal/services/renovate-gitea-token.age create mode 100644 hosts/istal/services/renovate-github-token.age create mode 100644 hosts/istal/services/renovate.nix diff --git a/.agenix_config.nix b/.agenix_config.nix index df86029b2411212cc64a9267ca60b8f26e23a542..6a4cd78d123d8a33453b703cf7bd1b220c05420f 100644 GIT binary patch literal 5592 zcmV;}6({NdM@dveQdv+`05BpS6G~leqD*%?&jW9~PxEu{O;&b(a7!3OLv1$h^M@4Q z^f=zGFJGd>!vub6vHnJtB)tQneFL|0Keo1)#MlKmHy!v{Z ziD@#^2tuEPX+WV~qc5i@Q;S5>T|#6p6rl1NvQ(}yEeD9h1pBeGsx4&Hfh6@z&*X}y zx8DuKfgzB$S9X~oJ_fcz?B-TFX0NYuKX%eBbJq96b(vpVAF})`RBC9Xp`ij)DAf$! zkPRH4Qw=#DR`w9QiN+u~`wAnm%t5WtRCR&4>Xj|jiekX9V#7YL6r8TK3pNre+3^61 zQiZv$5k?vlF>d*(wTd1zZR+=HIT)2ugk9)w*NHx&{V)mRJ?OsJ3_;@oXF-zsDee@2 zDYXrv>B%%#cVZH}$?twrSdmu-3=|Ix=UI$XMRT|)+JV_*2$*Z~h$gp)ZVi(b>E8B$ zf2eJutNHtzDKLiHuZaDeFITkYAeT&zoV&kG8jQ^DZ zEbQQN{j{`TTu91;2;(wNLmoDHD`{M-Mbhf?&G=*3<2Y#K=24+@*UmsijQW?+l6InH zAzn(!acmAqgK}_UBrH$H3BT1N&Hl5?=5|<&toqdnz+gGYWXG?fCmF&eR+i2V(4z2F zb{L##?eIzkeHIA>%u`vb{yS>)f;fEDx;j4`0@UCS^XB6((j80WT1}l-1CihW*l>c9 zdQ6#uZvf+XWQTB`GbJ;W{!x~r;lgkPa)WvuC=_-!6SU_8CBEF577yn~n5U*%Glhy8 z9A$*i8HC`QJ{*9~Vs)6am#a*X>s%<>X*+ph1`)Gb>(dFPDBk5&_CMO_ojJIJ>S=6xv zK?`e-Q_HlfSq-n$cNfhO>Zct)5kXv#Up7Ns6z~F!8dExVz-@?3a8$3m!SvM2A)x-* z;k_S`^qiop^ulmIhM}bla)IZ$$UZr_kOeP5qGA9_ABqOMv$A}){6kL}*8FMP*2um7 z+eaxfu*WT;s7R(zu(pM5TZ1n6*QzcM`p!!@COZ;{iU47D{+jB1V&g{_bG&ZP5kO=t zgp~?Dj;@GmrPi>GTf!o6NqiqGpf@3t`js&zkJ2%T`elJ=8izWjfcNJA{S3))a8&dR zDFrT80x>Y%vt2p=k}x1o&bgV9?hzYZjp9;NL5i=?T$jLW2omG-vDNQOXpP01NKd0P%>4Q-Q7k z^KEcKUFedG4(?&ywJ7&h2_}--q*kMCpx4=sXx8X3={`<}!MQeBId$SUop|*=g!)ec zXye@im>O^blpx58lYtw4GvC1Q1?MAY={5}9uyFyNV7oEVdV?V^WWUV~G#=~8x0Qe2 zw<5$}L{Zt?6^G=?f{36=&)SnWR`VPuTKQ)d5wdNHHcUKKK0lJgGsx2tMdR%@1WKhO z)=z}qZHSGW#ek4>?6sw8AXL)O*2@Xe{|>dk(6Ak!@DH`sb5@J=1J=A^o7Zek>)s>Z zjnl`jL_WV`Nrh6a0<5caySU2EDSefnvwnM4HNp07HR?ljyJXyTZL)4))}w#f6JA8! z8B)tVg+8vg&9U~dV0DsRYO1G&!vz!>@4Yy0t27WPG%BeL>JDXMLxFH4#Ua;YHp&2g zh1mfJB?qdivqy)FZbJfDHSQtc$}BOjl(z3JbL^Sxf&LVDVB>4<-oKU#qg#5`MQwGA zDkrVu*|R4l5%Y8#+I%|{;xY=VJ~(59e~x~4{DKNv@|GrL)?bApdI z$xk`~0}mMela`qHt9r~OYdlJMp9kL*g@kgUO9uD8!7BHZ1{9y_LXRME0yV~nHy~n_ z$UlAW!HayX^d5KCBO0p?gbwF-DP~v~=VH5X3F}F1C9Ap4Zb{nwxPJYtd)>Zj?2lWs zoq+{CXtit*XmBOmic6R2n9jSyW1?U?V+tyWGed51D=;K*JSsXrYfLN*n5=qJS-skl{2`u zmFcQbA`&$BwmgR}1-0abj}v#!k9AzIIQ#mz-F_|gj` z4gaH{Y>IT^iTo>pW=sT-!j;%ri^;OF50?7*H;ze6xt3h2uI`&!U%HWd5!Aaocp5@I zC7Q=Kwigys)AC^6AU~?4|7K=4%@w=c3E}oCXcf%w1^~C)thGD-bii?Df(F}N7H@hZ z0Tz4dNzfoePt1bG+RYcOSG4z)RVi9T)Zu;Sqh2=1Q^`=tKbXu8oB(8B#1A}%#%iax zakGj`2xDfh9jKo{L`OF(&_?UigFOl+Su;m^QzdWtaE29X7ZczZ2@(tc&R?`&nQ$q7 zcV2b$KbuUb^1wit=PX>jlyrOsxo_JWr3gaXf$J^1~z%lFh!ialv2H=yS*Wu~6>{oZG5AAkKfV zJ&-Zezrf6tt3kM0o#g^5!hKGwAFCQ(T%uelc4yy8M z7GGuisHYrT#AV=GkU336eo2z1(}8U>$O(_Hli;4J59BF|Yuwq7 zM0FA?c#`+Q^+aYqZb^KJxv`E!UBDVSL%f!LX+v4Xi%(}hTxQ>u1>;LGx87^(DnZo% zLBqZtck|X=)i*YZ@g0*p2TxKEYWCu_9k}-#v+cYyWHwYrdlqi3|MAPW?+{UXMbEtu zz8%zpFIzLyhTr{q{`z)i9}zstx7dVW>)ftFTuJO7ZgLy+AIfnQ*hW zUA>o0+0SY{F!Tn{PP2qtsck;deonN`hR5?+djxc1$pfey^@X_WVu8KtidBAIZtmbW zFTL1nbH4~ZT#U)a z71~KuhEl;wmhWH-S9QEj70pp&9=*L!hf=^fsZ#56yn$!}z9898|P11xkfk|R0F zQAneqJ~Bf~%>YzsofqhVhx;f^_w^&FgLE1Vtb$l)QtnAw`r~l=9xu&5P}~JGS*vW+O>R6$W}7*fk!2f z3$#ZPk8i%f>>oLX;iiw^cTvW6UKI3;1B)w5bCM+Y5Q3?u=&TjM3)cjbwawO46HO3U zo5IXyyTs5ZiFeO$FTf#e9p6$e3c05iR^-W-kui*}IA(B>zSxSo%iqM{B1RQK3-+eA zKHh5h?tz&N6r->nacynp1{6XJNHpgl? z8!G&c4b1|U9BI_=PF`K0u6kGO(%|l$^#M%#9$;9UMgxyBT5ux>U_Sp>qbzUYkRJ^; z*+$-y@k9=~3fp>*=`i2x%>h^{I1!U-i5wkX?ahwwS!-8u%py!da}=tW+lOwQAZ5E! z4|j(+Pd$IpPaN~)m|1=y<(mVw+XlHCqe6Ig1)v+}N;B;^s(rp7oH*{L{wYFrc97Xq zgsq~flB8>q`=ERTWr9Gs_Me0mFT*o?HA|jqz5pKg2W(B5Y>56#+umA))AAn1OPxg* z%WN+T5d6OvWxQuSxeXr|2ev6yBg*5O)IED_KK|KfecnFv9w#Cc=-{;w*pX4|b4a4- z!UXmNH_#tl8fhKJrzaPeN7c%MCpnVSj=NXB7vvcP0>ddKY`h~Eitbqi{wV)Y76NK$ z30@SLD^urNbo&sPRy+ag?_Zlci$WA0zvunpqq0({3DS-yCY!tzZ3+IEl?FZt{h~0g zlq1o?In5rQD#g)If9iCr5CQ>ne1BrB^t-t5ekVhQPY%1fjq!VuE@>}Rm5fjy=%O3} zy*vR`wGh@C48S+~xkBjKl|el~q?i4R&S>lrnSO0{ODljB=;DzULk~$6JNfvJj-)Sw zBS$5;Cset|0SHh9Y#;WtDQu`OLA(1JEhH)BN>0zZmcbn6Nwt;XM={a8?*@b|b1*Ex zbUYs$9wELE1na>%$T!Cp8}6*3!hAn8xd-x!( zAc4Mze!i)oc2kj0%(}e|Gevk(3}#lD?`oMjz7P6+7-W|06H9HEr>C>lg(C!NwY%?P zQUcSc&$!?gjIn*ipAJ4yMBZSZf0{%2>`Yrt77#<>cS{<$E5Ek8`LCn3 zj{VEGk3$$VyL{s=Q%EPhlkzEUS+Lp7MmXjOewtzJ1l#i9WfbTYz7SK9iDeFps(!&= z^tb}eWQaG36RTPy<5q=7S`w?G!nhVdN7|z7C!c>Qpf-nm*mb$ETK6L~F%xFmUhXWE zAvl$mgEUjC#+lRXwLOdG!K(lo4y@qRnIZ)GI8>c(kpG^OPZ4U5Yr6aCDvgKd3+r67al-Q8vvrkD(crQup*nO2 z^F1b$3JQ7?=SWG@MZZ}{0djv!nY$d&n9A<;erX!=P{%Cr*H0f<+^l{~z!xDSpa9y> zreGSoC`npmo-{qOtrxk2DS|)>?s|4bq-zWPV2N)EcW^$|^V3(r zQXrOPUtm4-$A2M?zh&0tQN_S_;i?Q2ah;}$z<6qUSHN`-Y%@~;^71!yB31W-Qh|-B z5np~r6k=t`4$j=N(z-LU>MtX$nVHIgs$YMLu{pb4O)Nuow>+N9SD%#+`9_qhtw2OT z4TTcry~4VRvQo<~PFrf2!IHz>O{a97bM$(7Es1y4w+=dcvhQSeMFnO1HZ)E+h7_)* z3p&{TLhcTJq}Ki*k*CBGrwLrCntE^~l`8iw`7|^YVZ(#d0B2)&-g#mpEVLDi!v(`E zw@Gd3gPxq5RB_6Le1QppiNY!I(14Rx1JfiyGsv$Kl8eL{lSC)Ud?ussWWk`i%{diw zIq^At8UnbQC!XU#{)MeI0ncS6OeO3ADf%{ZS?4?F8#Jcv2T~H3aNL8o5kh8o9mXmJ zG#H$;TGz#-5(*%2#PCR#e=h-*&~g`2#*?p9st}4&982dVlfHr8Gxs(P)KGZhgTL90c$0z%bS3`;m zzfs?}IpJV5g=e~mRrPvk1FusJ2BC|p1N%^?2&9Tx_RL6g%ogwVX*sDWMQdA7EGpN9 zK5gN9y_y;Gqcv5gd0(}JFI3)_)$XeDXZe}>P*XLxigCCEUacFcaw-mAq6q>v(+Yvx z{Y@PGZfF0&V1_)@p_UsUNWV()e^E}}d}Y@$WhpU9$3U^fX-I2T(|abhq`a7L-K{p6 z#Qqk*)?a~NUVl=M%m{3n2nzUZOHSSVK}p5@FzWK>tSYxo%V3F^D`h25@Nbpkf=6I= zld+dt{%Z?GA^GK+Qw-e^NNLdN`r1-cGFp{Ba!>bOcWIgDZsLk0VW94!>%tx;sYi1C zBs`JR1RSJ7-+MnyRSwc~(Zex}Ir9!gp(8n#PJ;%_H!I|ABfXps=0Tz+D7Iw<1>t(5 zewleBd4z!1P*WOtlu6#uNv)geJY|)!JZHreF!won;0@0AWRDjl)HE=e&V~rS6$cEt zCg9TNxn5;7d=Xc=^VzeS+Tg)uX{pbrNYAvM9}MmR=L5-#iKqEa5>&~vFD&Q7%T~4% zyPa>UAS|?%en5s-BxREj`SajlWf7F%5uaRYL47hBCwr+!Y@)HXa!@S=O(wh1|2OG% z-&18uik*Bdsf|?Aa2YXi}KaA&rn_MnIZH(CR zu0nK0q&v;f&SYWg^6?Bg57<5Zm2_o5u=c{s5Sq`uO-yeqY{|NcnWKxCnUr-%BueF>ZFn27)FI&j zh_=~Ti9W1&+7VbEbN9J4#I_QTh8+%qg=3R)Q0C_MISqla$*^u(81GuU7<|L^Q6r4~ z-|{KKE7+N>gIp%3yaoWFlkRkb(FSM?9mGHG0&|Ee1|&gvoIrn9jBo^rKSkQ5Kize9 zP>J~GG@V?8sX@MrqP6iK0OA;JO_o1(CaK-iG^nA#TYQShEK=st#0te0$EeiKZ@?^v zi4;4&r7uVNv$OgN!b8DA27bbCHeutttm4WiESKSc9!>L{Kt}9acRpD#wXFM2W>prM zTR=u>_#WQ06ttBUcXQUz+RVe_9sKV9Sb~H0Q35pxgR4X?3_)&Rd-b-p5ZNTi<8o3p z6dZ|(3GVc#lW=WEp$Qc>J3LrlghE4UskFIOTxCDA7fvOk+;~(NhZ&HH!ayV%&Yzej zAcEK)B%%+_3s39(@Eb<<>U(UjX&cmQ(!0~F&G8um9mLd5X)05ze>O~>FVcmt8+4=R zHVn>ML1YnaJ!Nipg1P3G?EOv+yZDNYGnm~fto`Ya!rJ$mvHcxqNvFb z-CBB+fnO5g7>i+#e^P*$8W+PFD7vusT0nF4&rT!=-9}&8_U$20u{27TfAb44%c7t{ zZVRA3^0{Jro#tIU>}a=j`Kngrh3ZESt9KDl^i_MUXU}xma})?LOmN@{moIpR`p;im zEi{3-mhL)*r=mm)SV+%&Weh(HoX8{Iav**R(UO|m{d>%A$L`9+7pBVR!5Bt{pExEy zjnUsd--3#SCRa*S$d3N&?&Trvs;8W{N5HeI$!2k&w`f$e4}{(&160>>!U$u1!GfB# zzKjITVhw;;Jlu)0b#)?q9KMsXf6(UrU9?|_Gs`6wvw&y&OO^9mcwayZLnu1K}F7v9lRz z9iDeku|svmYz&0zs@+9@Wi9-3TvRQuQTew!sG)?72xo8=grT01Jy+g*iI zjh6&RnCtx)I8q%vIBuv%xag5l)R|yL}1Hpye4L=nkc2djgcl23L(86Ae3#n(aQ}+n7_bNA46%iGo3X`o01c3G;lHI99X5n{-0UonV7Sj)sWh@bch7#?f(9k0^YI4CbgGTJ$8b2Dk@FgR zcDCwv!77W^eL~@WAoX7Wv(zv1lBS*(a(5ntY`7n41l${bf{DO4VEF476m>EBe*}zw zx|ObXp{ccM&bkdj=DSa~e*fr?p{mE`!aq0lX$cG62r43>RR|vn`^h`x;?FZxb>lV^ z_E!&dsLN)F%Q~TAxKjj4^(>S9PJee|9|g1Xv`lfozj)yTSM6`s_V7?wrk)W7g;;!X z0%6x1g2*%dyAp6zVvZa{c=U2&nA|I6J{}NChV!Ov*s{8Qd;E)8vQ^{X`%AIv<{>~o6721!%5Rn}FysMPoCea0>!wU2Mjqq7Cc|aileli=3NT-Q-O(h}WNiz79 zF&Y{svTokBC#qhQ@-adHR)RkcS)oqy9j=c5w-Ti+9@~Okm;q|WExEC8+crxFRo=fy zF+wpCQ9yCfj^{JJhiaPPnCXdJl7MhL^(`|i}sO_rrzC{9UukRHtjn2bO&bgoig{Md<-ac(Gtd$$w%qj3U!qcBn zipbhs6RG|a+2#V0c@sb6@mqO7B$Va5O|vo{%qE^5WUbP4fsKSk&ba75OfYQ9=za+I zB%|<#L4&>4fH5ua{Y&7z7&n>su=Uq9&-!nHqP3mxLx-MUF5U7kEU+C`G3%V6cyebq zBFv75@j*FnD&XsF;E6wAnIhLt`zqN!*iD~C=fd86=q zU6M@DWLWdr*4u5VPux-V5f6sH-jLgjQFxAlRpsF%UwKUHRt&kMIij^IDvm&JeN-EJ+Ot6>37ErcvlzLOTV zgz}&VybOYap!>%O593X$3VBzvK;RQ&nW^BNdKththX^?CBiV&H&Z)jO_=2-CCkGr= zg}FEBE8oqVQs#Q_Vh0pKhssf`FjAU%^qPHUm5#%h(Ysq58>e0gMWr15JKJiMxHQ4& z469eHsws(#JBxNNpNfO2P!c{iZA%oHgEl#Y6UP;sYK@ZT<3nFHpssI0?-7j!qw2O+^?>%9K|Y-PDQ{0Xms(Xu;wLGQ;B6AI6i-oCY=A1h95Yr zCc2uz=pv+Z*TmBEjd2TQnA~~C#H?JYER=`{SL^f(ZP)yNsC#mDv*O#`V=>PM1goFv z#U`+UG(%q{?TxF5NchsnDR6^(3j}_z?C%?U7J74fE0H? zgv-f1AfAN)cZ z_m*N3FkaCO_qmgZxtq~gnxAUlXv`P2fUHNo!GNt^I}VItlN)pV!Yo}Vgy)OBzFhJ< z6f_rtY2X)3)_5jLKEVtZu^Fwi~AWuKqr5iIjiGO6bb9R*t?}jSRN{t1&ZG z_{Uiap%J3|4J}EtI5zaI(1gNHi<{WibQ;rK>*50 zXFwN?*x5`SJJ?6~?cnGDPLwxVyE*;ocBYCpO{Q9F>2RSa{V|7Ox8cvHUS|SrXJ{PP zp|nd?y|3J3#(umR06X&0Syt(hN4NxJR>SLc$2E)IM_+^X9YSm_G{y%qVSOOiR6;B- z%`NWD372SKPI4^jdxS6R2`-bfqD(N3qsm>Z)Pb>?d3AClE^Z$~xFpnmde17Xi%^^- ztjb52@dr;jdHU2ir*YXJJWzjq7cQwrNXJ00%?e8aF)7@SZ&XN zGL#hlD~Anv7p3HUbivrN5duX$BN(g{vE)b%!btd?ICM#|G*V@A6-v($s8pp<9|oxk z!Oi1cDh90q5QzA|-Tkek7az%iw_}^PGw^L5y)Z`C>@}I1QxOx~48vkH$|c```M3ok zl;W&pM!0r~7K#Yn<5)FF`SpH-B~hj5tMy7Tl@;i}^^J@s6)!AhpB)rX(qEi| zj8q>V-~!DjC*GpAv~oq|nzqZnR1f;I@jwCqRr!;mW79Lm2U-Omxi(oNseo7YD;Q>N zB@KIH#7?wB$xYTtaX6GJJ5YE3BOc8HXMkVH=BI{2ffgT5HKk=6*^)$2;QRq(cFQY4 z7hM^Z(<0OMH~HKyj~VSA7r2UWZr0qHo+u%ee5Lb2pFglg)|q+ccI^_o?O(LlLFMtX zz!#^ErnL;Q_Xd&biC_rII#(9Y=Baku68U)L7gU4xvLS!XEKMHm=^dG8yQsQcnw14* zEha~KJUqT%^%qCdY-`Rydn(?KGS^-Bdv_2A3!%$c2lfP6Ac3~8l=c6Unhq`#j~v$o z2PNFK%L3frwS^%77}Elt(2M}&_$AQ{hor+5f*}3t$+!4ICIR?wWeb?$qlDbr{tpy~ zg>kI>z22#3_LX<&=LtHu#`Pn|3i8z3 z(93#o`VJ`ibZaC|S^D6rwqm_fyqIcXPd_EJ7%tnf^O7<@wX&{nh16M=W+BeS^_3&W zbHmnfgDm>7vD)ZVPRB~vyPZP$_c3`$&1iGO$hygmfz_jSNna6AQp5$ViHqC3 zIPUAFEgn4AuTfN1<>CqBO~QV&aZg;lWvRb}L4Vm(_ue$iL&P9Z|RU`X0m7s5biOxIw>ha4Wvd_3#~D zQh+T16zsGTEE#o#SF*b23$Pg(%9~${hjvPwQG-79UeMVX=#e}La~8pU&=*B7k!%|+ z@V85jDbRA~Kug5u6O;((AGeH)tHr_-;PAIW6t3rp!*kX(v$3>7jO2?z;TB1}@|7Hr zbC&c+oisBwdD`7`FaNZecxc;dNBLw|Z*cnDxR4Ya zrJRo;HY~1519|ujP0CI+O;Kw7!{cC4p(z<;%p<$4gll`jxJ0PlUn0ES!wv| z*arP_a52GL|JB2Ed2IP`%+2qSsj|GtB~JPNPTq1@g?JU-EhnC*`Gms#t*9~m z%A9vp00n29`8S6$G<7i|3Pa8qP`ymOzOoblq(eTrgLKpoS?&8V#|#GzLwRsv1hm1s z!|ii`Fp2-zlgW$#_Cl6L@UW&MH-sa9xZL2ee|qQGDw$6J#&qi zqL~H{qANo~;@Bj1TXRfZ_!aY3-;| z(eyp23!B+4?>4j9T;bRN-&qL61dY~zMBy28LYPn(=~ZZ*GU24q7^_V39H(GzDmhcT zlF||<{85G5^oa*o0kGh14haZoMMe_cc2`-(wpio$^iw~RQV|ky{ zGS=O4L?l$_esR;Ul?FHGNi4R*f`l3wMs0t!%yw4dj)jUm@erF@Wen7XwytYxnE^(S z=f(vPbDpHw9tMpu6TF5>cU|z|sybxpz{VQn z?S39RDHxuKMN*x~{iT>XK=}oy^{xs5*@%Ugtl+V8=!=bQ!FengZWnK6mXD^OSkp_o zSNL`k^>7ws8tRlh%LbmthyryIZ94^QQrhe63^L1e2dzs07-EA=nGg-y*P7LW4ZvpZVUP)Mum z+(atZ&*Of5757CiY$zutEs(UboPH}CcP7aAet=l)|0EG&Wqd%4YE3^zqy{Z}caV7( z4|OR@ZmtC0e;w(oa0Q2C4UR^NoV{N-`P$tZZ@Y7=F~Fh2nCmRpE)XnH!?3M#a3&8z zWkHt!1V5=Z;L92cg@B#YTw$6pyF!>{2GM=%h3al*a9m;L44vAogLmTRu`}F6!>I`@o$ocPgG4-cnTLWucxZ zzsBRN1vqTv!k13x1MzJYP#v%shT9$`R(Jn~9BEl{(O|O?UUZ-Ff&pl69SR#*pbveT z)+|nOONQL9Fa7g35DAN-2!Br1(Ke@InG1JG+uj7L6 t<;qYPTTvY%Jc#~>-&EKPH{KEtn#f-de6q`Gz;ulRwfDqW%HmeGqvdb?b`<~s diff --git a/flake.nix b/flake.nix index 217cdaf..3787549 100644 --- a/flake.nix +++ b/flake.nix @@ -178,7 +178,8 @@ ] ++ extraModules ++ [ ./modules/nixos ] - ++ [ ./hosts/${hostname}/configuration.nix ]; + ++ [ ./hosts/${hostname}/configuration.nix ] + ++ [ "${inputs.nixpkgs-unstable}/nixos/modules/services/misc/renovate.nix" ]; }) (import ./hosts inputs); diskoConfigurations = { diff --git a/hosts/istal/services/default.nix b/hosts/istal/services/default.nix index 06f5abe..299fb8f 100644 --- a/hosts/istal/services/default.nix +++ b/hosts/istal/services/default.nix @@ -4,5 +4,6 @@ ./wireguard ./docker-registry-proxy.nix ./nginx.nix + ./renovate.nix ]; } diff --git a/hosts/istal/services/renovate-gitea-token.age b/hosts/istal/services/renovate-gitea-token.age new file mode 100644 index 0000000000000000000000000000000000000000..e2ee65d2a4ca1044b01dda7b3ad6275b1345f6dc GIT binary patch literal 1290 zcmV+l1@-y>M@dveQdv+`01D-RL;=*aEAQ-F=ch=3D;O9!Q*21ZAK3T3(Q9+on`LC4 zXs!n4Q^E;7#dfz+w-wJ1=&GSmokzbRgP1@zhrlJ_+fH|riM;tIfMbV>7rEYw~-5(-bO4lZ%{g7(X z)+s7*hkZq@*xgRlw->1(jc|_YXdcR&R#Lid&)}mm7_>PH(9M#An?eLz1??FBEyxks z@Vd+qyQOek7DT_|UMg0juaW4f`rAcg66fKMN#@ILbJgc<%^!FI(hvbR&{J~a^`y_* zb6TAGht3-kuHO8o=rThPf?Ac#xiQq^>$5*Gd@x!5^?Nw;7qrB#TJ{O`syXI4M#GWo z!UCs+4;|=h81O2Xr>EXS2$q+$qP$Wnv;KlxQ0Hr37BwodV+vy)fM~Y50G!4$H;}f+}?qCTGExFJnDlo zF5s5?Lln$_DntlCnq?_%a;rZUeoT3&_L|YL3r2#mlGp*_NH$4knMXAV&a*{{~RV)jcBhSkGiKoom+G_Lt?R%=17S@&D zI-~fT5t9$ssQ~u?Mu6JaOLcf`Q0DKeL9%MxmW}GgMQ5C#JLav-ty$=aDD;#)3c}u< zE$g}HyS6&$mFeN@;_Tv0MLpO@B? z%sq*|UF;k{gkRmVO4x5CodYaVd2xW6!!po>UYPSOEI_e-u8t?$k_tfk*O6$!ysH$E z;Wsno*~vJ9sWi6kUc$pj9RUd|r{Z(}p7m*b>N|~g=BB+jsUK3{b-R_Bkx(}oD}HvT z)sMx=`X6Km1lIGTD57*HHes)AU2=i)GsB+eqeAm?3_3Hq)o?{eh_23?B~mXY=fqIt zC)MMl+z7u0T-+j*7e`#*8b(+6FJ|_;bZK0lvt5xHGs1JDj%v-ID>!3QOb7~;7Bdey zbp5l;?9SbNfVbTpzwO|s55BMk>}XDSJZc>8GWW3CdF8WvV?Z}rPz26KP}j;@rcI=i z;B*-LUB9rM@dveQdv+`07^a0fi{U9N*BaXfYQL>hpXAlJls0L0-$MJD;d&s3``$7K)RVd4 zAGgK6k73S--pvrwlxn?5YXVr-JNyNfB;LWOQB1Y58OwOD478@~6rw}1oedfm>#mOy z`$Ojvr_47%hTkG-Hb%!^vgb$$8a7JcSW^)Q`DVMN4^xKfrLyCk*dmxfbB`0AMGovL zPF<3&v5Jd}SN?r6q{62Zg7sDrWcDw6A^@psm)UrQ3*gU2V*Lp{{$9E3P6$6&Ib?N6_xXS<3qSkl(nhzeD53E6)un&*dj6 zbv||q{=AI3p+RQ^q4{++eDgO3(WeSmtSaGqrZ*SKR zqB_kH8w4|&iZ@U%YQMCh;#wKJLF*STY_1F-D3V=C%XbZSJdRpIN!zoZM}ZM?0-B<@dDHTy~M)9b9_BhWL|y|g^0F1*&L&Ol)IMV zjpLtcKAuj3-(^a=_L@+Evf-TADO>6=@p*5A!YkWt5zL7H7kI@aKkG|-w(K!t8zfOO zM=J<4D-Dm5kyNVfy6}l(MUE;{uJe}ipP21p4+82+`uoiHt%vABl3SGJ^;Yf^ob=~a z9b(T-{PRcGBd6MTo{!-jXvPo1@xf!gLPpd2)jJRNe&%GWuI;0lC=pqPxp?s;Msb^= z*dc;nyT0Jg;vsH_gwreXpXZF)6ChDXiAgbkbQDIN!bhhWGc`w_n_DHWQ9U%0vA+-2 zgP;7s(Tm!@kavtt|2QHKAIy?JQoLwr3oz=f2zRNaA+y^;56Bgo41+e%eePeQ;@5qj z&MsBEz3fKS?~m|%l%xLPrr=UeOqb}mIYfdd*KD`E28&yeQ-Q_V_WqOAeX_3?8*Tpr zIBAp0-asFSV!PmA;3Q*-3ELni#1<+JI}AqHBt3yZ9dOyrn=e7!GH2U5avoo|X;E&8 A%>V!Z literal 0 HcmV?d00001 diff --git a/hosts/istal/services/renovate.nix b/hosts/istal/services/renovate.nix new file mode 100644 index 0000000..c518fe3 --- /dev/null +++ b/hosts/istal/services/renovate.nix @@ -0,0 +1,46 @@ +{ config, pkgs, ... }: + +{ + age.secrets.renovate-gitea-token.file = ./renovate-gitea-token.age; + age.secrets.renovate-github-token.file = ./renovate-github-token.age; + + services.renovate = { + enable = true; + package = pkgs.unstable.renovate; + schedule = "0..3,10..23:00/15"; + credentials = { + RENOVATE_TOKEN = config.age.secrets.renovate-gitea-token.path; + GITHUB_COM_TOKEN = config.age.secrets.renovate-github-token.path; + }; + runtimePackages = with pkgs.unstable; [ + nodePackages.pnpm + nodePackages.npm + python312 + poetry + gnumake + cargo + ]; + settings = { + platform = "gitea"; + endpoint = "https://git.pleshevski.ru"; + assignees = [ "pleshevskiy" ]; + autodiscover = true; + packageRules = [ + { + matchUpdateTypes = [ "minor" "patch" "pin" "digest" ]; + automerge = true; + } + ]; + automergeStrategy = "fast-forward"; + onboardingConfig = { + "$schema" = "https://docs.renovatebot.com/renovate-schema.json"; + extends = [ "config:recommended" ]; + configMigration = true; + }; + globalExtends = ["npm:unpublishSafe"]; + + cacheHardTtlMinutes = 60 * 24; + httpCacheTtlDays = 7; + }; + }; +}