christoph/flake-homelab
1
Fork 0
Code Activity

Finally fix gitea + actions

Browse Source
This commit is contained in:
Christoph Urlacher
2023-11-09 19:39:46 +01:00
parent 1241196567
commit 715ad266ae
3 changed files with 49 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
ServeNix/services/gitea-runner.nix
View File

@ -5,7 +5,10 @@
...
}: {
virtualisation.oci-containers.containers.gitea-runner = {
# Question: For gitea/act_runner dind set config.yaml/docker_host to "unix:///var/run/user/1000/docker.sock"?
image = "gitea/act_runner:latest";
# image = "vegardit/gitea-act-runner:dind-latest";
autoStart = true;
dependsOn = [
@ -16,20 +19,40 @@
volumes = [
"gitea-runner_data:/data"
"gitea-runner_config:/config" # Managed by env variables for vegardit image
# For rootless-dind
# "gitea-runner_rootless-docker-auth:/home/rootless/.docker"
# Cache dind pulled images
# "gitea-runner_overlay2:/var/lib/docker/overlay2"
# "gitea-runner_image:/var/lib/docker/image"
"/var/run/docker.sock:/var/run/docker.sock"
"/var/run/docker.sock:/var/run/docker.sock" # Disable for dind
];
environment = {
GITEA_INSTANCE_URL = "http://gitea:3000";
# NOTE: gitlab.local.chriphost.de doesn't work, because it gets resolved to 192.168.86.25:443, which is nginx
GITEA_INSTANCE_URL = "http://192.168.86.25:3000";
GITEA_RUNNER_NAME = "servenix";
# Can be generated from inside the container using act_runner generate-config > /config/config.yaml
CONFIG_FILE = "/config/config.yaml";
# NOTE: This token is invalid, when re-registering is needed it has to be refreshed
GITEA_RUNNER_REGISTRATION_TOKEN = "nNNfjQOLmCVMdmx5rGZGCPYZwOH2jHVnQkFtaOYC";
GITEA_RUNNER_NAME = "servenix";
GITEA_RUNNER_REGISTRATION_TOKEN = "2tYcfzALjmIKILPO4jnIdgfGO8RjBGIZCOoP4bYS";
# These are for the specific vegardit/gitea-act-runner image
# GITEA_RUNNER_LOG_LEVEL = "debug";
# GITEA_INSTANCE_INSECURE = "true";
# GITEA_RUNNER_JOB_CONTAINER_NETWORK = "host"; # "host" for dind, "behind-nginx" otherwise
# GITEA_RUNNER_JOB_CONTAINER_PRIVILEGED = "true"; # Enable for dind
};
extraOptions = [
"--network=behind-nginx"
# "--privileged" # Enable for dind
"--net=behind-nginx"
];
};
}