add github-runner to tomato

0x77dev · Jan 4, 2025 · e8a1564 · e8a1564
1 parent af12259
commit e8a1564
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 2 deletions.
diff --git a/secrets/shared.yaml b/secrets/shared.yaml
@@ -9,6 +9,8 @@ cloudflared:
     tunnel-credentials: ENC[AES256_GCM,data:GXMfdC2RlYxw6S/M9JJgvZcsvRcM0avhJl0Ww9eIHH3vr3i2J8+z+RL8nNJk5VRZOUID/bGvKjIPVlEZqxXOemKt46fwZ5h8Srl25Dwi39rTbECY0RJr0maktsFNXkvN76h8+fN3ASQ9Mt3wt5Bu5Ze59SfXFPyHPG4KiAzaZNLB9rvRI5soDRaqNKAklnt5pG5BhTmOzXV2MYynZy3JaRaK,iv:8JNCf1+SyEhMan3SKn9Eue0bbGmZAexEDXa/uR276L8=,tag:ZYkGgo8WeVDYnLewZDL9yg==,type:str]
     cert.pem: ENC[AES256_GCM,data:PEejQRM5SdBem6ebuuACyuH2l1lhKtgRCFhW9u22vAHnQ80WeqM/u5SRRUFpusbeO6OC81jdWSuYc5f4rrycUjYLQrNSs4Y2mxXdQ1cZuOTkwm9aN5PYBIXraIAjiP9reZUNgA6zlrCBQJRDdQM3sDNvOH/e7dWnaYdgQ+MUeZr0MdZqXh8aGba8+B7Rkngup0QMJVF7B7w63dpYJn+lQu0/Hon680wCfxvV/t3755uPMWxcq+K0PA1Y8FdCr6kGD1sGB17y8vQ9xLG8drpmHJxHOmDejmheAURNfakB4JiC/hC+/9eLEKljWHghEhUPmVM8OD5lMTjmpkkhaFy3j0J6mbaCxFJsMAT1g4q5+Ly8/tCNIiW1Cg+JQqGmjv9PcB7Obgs6XNG19++cPe21E7OHWbchYAoexRGHcXzaZzjbbMqLPl4IKusK6UbDw+3zdwcgpZ3Wau95D0RHZ0LB2uR6dg3ejR+QuP240nNVNhHAD2spEO36B0dp/WkWUC2akf32DN1g/fbbpza2d/72O38JsTJiWDFRcZcWxgjQISBKWpX0j1EcqoVvOWIutWhIHix5staUoJGdlmjvKSm8x+olDpZxhMQve0SXAqcKio/DD5CJYk4YDeItQkr6uUHbvzYCzJZzHnUEjH2NhCSzJl46n73f7KDe8kXhjRI34412jDKLZHUawg5fX/3fHkoiVO8XN2l9uJ5waJm3ej5mAevT9y/l55QqpDyQlVVP7wMt/sUA/dC0w8op38972twC64bu9JzVAXTLL8IHjvaMz0/tMoKKrTupwS4WMi323/EyM6sVS6m5n7HTDqLIdn4Ss9z151YjuDzn0NRvNEFZidls/sTdUuezzYqg9lZv/swQnXaoNpjQQkjY22unNTFXxZmTbAfAl7S7Nrv8Ihf9G8MvxV/Rxo9HPHYf/BvnHjVrOTRolnJbpIqF1ktCIAjjxeoH9AH6J3zH0ByfE39i2EUOyNL/4b1WaGWI1tEO0TpHsdzjfWHBob3dpO1F+pnFlLBbGf/9hPItR3UXKGQL5hdQPcYjN+KVSZQQEZNadcXnj2D15s9uN0kzaaS9CA8J+f7x3xuyyb+xKqXj2Q85y5iEC6ZY3hZZOLjQfyHvGjs+ROD3aoo/Uy7FOVBeoYrM0todcIOdhIlP/XR7WVpafB3hvy1NMGjm2mKEBSuPzx47o4C48SsQHHFHAmNNxh9tpp0kptPcBP6ds8gIhj1jAgOMfDtjLaTErczsKNsp2xJdanu2AoeTiV80Ld5bRtB2rBY9UrEeg/SysZCCiipG2M3pGrwFq4iOuvyfaIDDud1KC5si885EkyldLr7kKl/t42BegB/7++zUXQ7E0KSSPqKor5Kg28Z4FjaWXK8dacuXW4FFkoNddEFhiKEK8dC3yZ+Hpu/TlkOPTx9xteoKNz5a709Izo9ugvM/nmD7Oszr+PTX7vC+lVAU8fN/QS4/pLzihAzazG4aHnHkHW6lOgQ++DtIlezM0tgw72C+BWoFozF5jWikQEbfukuJ5h/fOCp7rDyvbpMo0EV9hVVvJofrakAWQyjzIjZ51N1RQivzVIrbQ0HQUQbDaIqEU06wbz8hyDDhJca7GtyYTmJPFoKFb9f00TeRKLuCl7HDYPCjNA712KaVbBRPwpUofg+trgDOOQbQqThb8wtPdGZnU7Wd0ftNT7L+0n5w+svbLDzdEqv/qez62lhh1mREe2/65L1wtL6CZhf/klLtuxPDnhlSwTkQfKiwtxxWJHhCvw+BRgsDJcR8g0U4gCgdXgYbWyxAEWrmXxJJD5tUiJdiJEzzmgTII2Pr719J+TerJZZd0RplORuqSI4dZiywfV7fXO8rYIliclqQIOiEgeVZkWEqaJo6Jz9FJkfgvUwREQ4D7O6pkXpaBxaACh4qg8EwNKajfiu0EKvYelO8E93a+zZ9l45ZjXAAq5qxz+CrBHCZgkVj0ZwtlIdRbeSUB1T+SS1XhIryDbuIghzf+Lf0TGRM5AuTCGshkOaWKPv9TRJEmzNxDpZOCg8MDmGMqOpNDV2CEo29AdV89/8LKfgCz6vgDk7rhBMYG05jtlGH6dKI7XFTQm8gi2unZxldiRY5oOWfvykygRV7IQBANWxDlCy61j17tclFiU4aSRllMPHEG8HwW3lWhf+mHxCPM+EchUtD/f88nmDiA5LFiKKDK8MHZlOz1a+k0IzddeVr7EL/F8G7aGhE/D7dL7FgE1UypqGlv9/KT3H3Z5QIrX3K0hsg1URfxaxK3lF2HFti4VZ5kjs6QRZlOAztn0HXvyi+u+26sdd8O1v/hROicRLJvkI7NQWC6qd5mFfKtK65FYCbe5ZIRm6PTzJyjotqwz5mxoBGZ+rV92g7BvVUPdxDSFMskl+ZcPZlsq1/zCLB621mQoeFMl3+9Xzs4sSyLx527Z9yyqFcnSwS9DOLHHLknZ+8FcL7u+0ls10dv30BohYwjRxC6sgORubcFxe2xuAU83VfDg+L1LPX7MY54UQnleXW1sQ1LiLyAfW7AkxEFSfWARTK7nQJcFRlK8EVczRoS8y4D7ryUYXWKLJznRg=,iv:oEHDSeDINBVgLcAMnSIszK7IGRrTkBfImxYjEvegQoY=,tag:XoiWJK0o+s1QOTLa9OJoqw==,type:str]
 note: ENC[AES256_GCM,data:F1BheO4Ubrf3i4cw,iv:eP/d6W2w+TSax9RqeQUAHrjLFUgOmwEsHvaZDEbfuUc=,tag:/3CgODBImCkiUgQ+kgKJPw==,type:str]
+github-runner:
+    token: ENC[AES256_GCM,data:KTbgNScL1GBP+dnr5Otr2b4Ot6vFerKyuCf0V8U=,iv:/J4789nVurMwZAZDFJuVRuWMH+z0DLyeuBBNUZI9BA4=,tag:Z/x165GGKFwQLf0zGiZ0Zw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -24,8 +26,8 @@ sops:
             aEgyRGs4MUFmVUVYVVpta3lPdW5JR0UK1xZygwpDSYWI0jQw8Y54tbi7rtZ6yN9t
             lEJhr7FeUk6yYwB9Vi5yhMO46GhHAfxo71xbQkXjOEZ/sNnnpYQJ2Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-01T03:45:48Z"
-    mac: ENC[AES256_GCM,data:PzuGTEZZDw8W171UOZherRs6Q/XYFLj5MkDjq3mG1TJRMvMrVqSxGCpjZG7jrXUiJCEUSiogBnJEoVUvOzVV2ehd1P0o5UEyNzklqWBTNdVM/HSkgKNwdZLMn5TjEnl5E7Ezf1nPlRSjmYQlkG5oRvf3xJCA0Y6rRC0LuAG23Cg=,iv:/M/iPgjXqXef8LQ8AmJT03MUihjWvnETGnWd3nBRFok=,tag:LE1to5dJG9IuCrK5oppSvg==,type:str]
+    lastmodified: "2025-01-04T20:51:56Z"
+    mac: ENC[AES256_GCM,data:+CtcUII839G09tYFjxxpkssnEUKW737KvNw7j1huFw5297qODLB9yxcV+8vBg/TiSFIIJBNlzzjRpiorfJeGK7qL+z7BbBfCP1SKxuopW/wgIkuI6NmUIkUE/25aDxRT26QaweWIAJPZeSlC/xMnr8OGjn/JGAb8Dejeq3TFNeM=,iv:3+K1uOEvQONZIgyJjnS7xhwlmD9pgoLeUy2oAiuh7b0=,tag:ZnbuWlvVCnGfHjBNB8BB2Q==,type:str]
     pgp:
         - created_at: "2025-01-01T04:27:00Z"
           enc: |-

diff --git a/systems/nixos/tomato/configuration.nix b/systems/nixos/tomato/configuration.nix
@@ -35,6 +35,11 @@
         mode = "0440";
         path = "/home/cloudflared/.cloudflared/cert.pem";
       };
+      "github-runner/token" = {
+        owner = "github-runner";
+        group = "github-runner";
+        mode = "0440";
+      };
     };
   };
 

diff --git a/systems/nixos/tomato/services/default.nix b/systems/nixos/tomato/services/default.nix
@@ -8,5 +8,6 @@
     ./analytics.nix
     ./ipfs.nix
     ./arr.nix
+    ./github-runner.nix
   ];
 }
diff --git a/systems/nixos/tomato/services/github-runner.nix b/systems/nixos/tomato/services/github-runner.nix
@@ -0,0 +1,14 @@
+{ ... }: {
+  services.github-runner = {
+    land = {
+      enable = true;
+      url = "https://github.com/0x77dev/land";
+      name = "tomato";
+      tokenFile = "/run/secrets/github-runner/token";
+      user = "github-runner";
+      group = "github-runner";
+      replace = true;
+      extraLabels = [ "home-lab" ];
+    };
+  };
+}