pim/nixos-configs
1
0
Fork 1
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity

feat: add argunix CI container on atlas #54

Closed
hermes wants to merge 1 commit from hermes/nixos-configs:feat/argunix-container into master
pull from: hermes/nixos-configs:feat/argunix-container
merge into: pim:master
Conversation 0 Commits 1 Files changed 7 +329 -50
hermes commented 2026-06-19 22:29:53 +02:00
Collaborator
Copy link

Deploy argunix, a declarative Nix CI daemon, as a new NixOS container on atlas (192.168.100.32).

What it does:

  • Watches repos on git.kun.is via webhooks
  • Evaluates flakes and builds packages, checks, devShells, and NixOS configs
  • Posts build statuses back to the forge

Changes:

  • globals.nix: IP 192.168.100.32 for argunix
  • flake.nix + flake.lock: argunix input from codeberg.org/tfc/argunix
  • modules/nixos/containers/argunix.nix: new container def with argunix service, forgejo forge config, sops secret ref
  • modules/nixos/default.nix: import argunixContainer module
  • modules/hosts/atlas/default.nix: enable container + nginx reverse proxy via argunix.ts.kun.is
  • modules/nixos/server.nix: sops secret for forgejo token

ToDo:

  1. Encrypt argunix/forgejo-token in secrets/servers.yaml with a Forgejo API token for git.kun.is
  2. Build: colmena build --on atlas --no-build-on-target
  3. Deploy: colmena apply --on atlas (requires SSH key)
Deploy [argunix](https://codeberg.org/tfc/argunix), a declarative Nix CI daemon, as a new NixOS container on atlas (192.168.100.32). **What it does:** - Watches repos on git.kun.is via webhooks - Evaluates flakes and builds packages, checks, devShells, and NixOS configs - Posts build statuses back to the forge **Changes:** - `globals.nix`: IP 192.168.100.32 for argunix - `flake.nix` + `flake.lock`: argunix input from codeberg.org/tfc/argunix - `modules/nixos/containers/argunix.nix`: new container def with argunix service, forgejo forge config, sops secret ref - `modules/nixos/default.nix`: import argunixContainer module - `modules/hosts/atlas/default.nix`: enable container + nginx reverse proxy via argunix.ts.kun.is - `modules/nixos/server.nix`: sops secret for forgejo token **ToDo:** 1. Encrypt `argunix/forgejo-token` in `secrets/servers.yaml` with a Forgejo API token for git.kun.is 2. Build: `colmena build --on atlas --no-build-on-target` 3. Deploy: `colmena apply --on atlas` (requires SSH key)
Deploy argunix, a webhook-driven Nix CI daemon, as a new NixOS container on atlas (192.168.100.32).

Changes:
- globals.nix: add argunix IP (192.168.100.32)
- flake.nix: add argunix input from codeberg.org/tfc/argunix
- modules/nixos/containers/argunix.nix: new container with argunix service, forgejo forge for git.kun.is, sops secret for token
- modules/nixos/default.nix: import argunixContainer module
- modules/hosts/atlas/default.nix: enable argunix container + nginx virtual host (argunix.ts.kun.is)
- modules/nixos/server.nix: add sops secret for forgejo-token
- flake.lock: lock argunix input

Note: sops secret 'argunix/forgejo-token' needs to be encrypted in secrets/servers.yaml
pim closed this pull request 2026-06-27 12:21:09 +02:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pim/nixos-configs!54
No description provided.