Remove gitlab-runner from linode
buildbot/nix-eval Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-genesis Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-linode Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-hosea Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-vm-gitlab Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.hm-exodus Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-iso Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.pkg-upgrade-pg-cluster Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-jeremiah Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-icdm-root Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-zeke Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-proxmoxtemplate Build done.
buildbot/nix-build gitea:greg/nixos#checks.x86_64-linux.nixos-isaiah Build done.
buildbot/nix-build Build done.

This commit is contained in:
Greg Hellings
2025-12-29 01:57:59 -06:00
parent 489bcb7e51
commit 83e58d8015
2 changed files with 9 additions and 28 deletions
-26
View File
@@ -16,11 +16,6 @@
./postgres.nix ./postgres.nix
]; ];
age.secrets.runner-deployer = {
file = ../../secrets/gitlab/linode-deployer-runner-reg.age;
owner = "gitlab-runner";
};
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
bind bind
graphviz graphviz
@@ -55,25 +50,12 @@
]; ];
services = { services = {
gitlab-runner = {
enable = true;
services.deployer = {
executor = "shell";
authenticationTokenConfigFile = config.age.secrets.runner-deployer.path;
};
};
immich-public-proxy = { immich-public-proxy = {
enable = true; enable = true;
immichUrl = "https://immich.shire-zebra.ts.net"; immichUrl = "https://immich.shire-zebra.ts.net";
}; };
}; };
systemd.services."gitlab-runner".serviceConfig = {
DynamicUser = lib.mkForce false;
User = "gitlab-runner";
};
security.sudo.extraRules = [ security.sudo.extraRules = [
{ {
users = [ "gitlab-runner" ]; users = [ "gitlab-runner" ];
@@ -89,12 +71,4 @@
]; ];
} }
]; ];
users = {
groups.gitlab-runner = { };
users.gitlab-runner = {
isSystemUser = true;
group = "gitlab-runner";
};
};
} }
+9 -2
View File
@@ -87,8 +87,15 @@ in
networking.firewall.allowedTCPPorts = [ sshPort ]; networking.firewall.allowedTCPPorts = [ sshPort ];
systemd.services.haproxy = { systemd.services = {
after = [ "sys-devices-virtual-net-tailscale0.device" ]; haproxy = {
after = [
"network-online.target"
];
wants = [
"network-online.target"
];
};
}; };
services.haproxy = { services.haproxy = {