deploy woodpecker

nixos/hosts/olympus/default.nix

@@ -168,6 +168,11 @@
     ip = "10.42.42.32";
     mac = "7A:17:9E:80:72:01";
   }
+  {
+    hostname = "woodpecker";
+    ip = "10.42.42.33";
+    mac = "1E:24:DA:DB:4A:1A";
+  }
   {
     hostname = "nuc";
     ip = "10.42.42.42";

nixos/hosts/olympus/nginx/configuration.nix

@@ -54,6 +54,7 @@ in {
     virtualHosts."outline.0x76.dev" = proxy "http://outline.olympus:3000";
     virtualHosts."id.0x76.dev" = proxy "http://keycloak.olympus:80";
     virtualHosts."ntfy.0x76.dev" = proxy "http://ntfy.olympus:80";
+    virtualHosts."ci.0x76.dev" = proxy "http://woodpecker.olympus:8000";
     virtualHosts."pass.0x76.dev" = {
       enableACME = true;
       forceSSL = true;

nixos/hosts/olympus/woodpecker/configuration.nix

@@ -0,0 +1,59 @@
+# Edit this configuration file to define what should be installed on
+# your system.  Help is available in the configuration.nix(5) man page
+# and in the NixOS manual (accessible by running ‘nixos-help’).
+
+{ config, pkgs, ... }:
+let vs = config.vault-secrets.secrets;
+in {
+  imports = [ ];
+
+  # This value determines the NixOS release from which the default
+  # settings for stateful data, like file locations and database versions
+  # on your system were taken. It‘s perfectly fine and recommended to leave
+  # this value at the release version of the first install of this system.
+  # Before changing this value read the documentation for this option
+  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
+  system.stateVersion = "22.11"; # Did you read the comment?
+
+  # Additional packages
+  environment.systemPackages = with pkgs; [ ];
+
+  networking.firewall.allowedTCPPorts = [ ];
+
+  vault-secrets.secrets.woodpecker = {
+    services = [ "podman-woodpecker-server" "podman-woodpecker-agent" ];
+    quoteEnvironmentValues = false; # Needed for docker
+  };
+
+  virtualisation.podman = {
+    enable = true;
+    dockerSocket.enable = true;
+  };
+
+  virtualisation.oci-containers = {
+    backend = "podman";
+    containers = {
+      woodpecker-server = {
+        image = "woodpeckerci/woodpecker-server:latest";
+        ports = [ "8000:8000" ];
+        volumes = [ "woodpecker-server-data:/var/lib/woodpecker/" ];
+        environmentFiles = [ "${vs.woodpecker}/environment" ];
+        environment = {
+          WOODPECKER_OPEN = "true";
+          WOODPECKER_HOST = "https://ci.0x76.dev";
+          WOODPECKER_GITEA = "true";
+          WOODPECKER_GITEA_URL = "https://git.0x76.dev";
+          WOODPECKER_ADMIN = "v";
+        };
+      };
+      woodpecker-agent = {
+        image = "woodpeckerci/woodpecker-agent:latest";
+        dependsOn = [ "woodpecker-server" ];
+        cmd = [ "agent" ];
+        volumes = [ "/var/run/docker.sock:/var/run/docker.sock" ];
+        environmentFiles = [ "${vs.woodpecker}/environment" ];
+        environment = { WOODPECKER_SERVER = "woodpecker-server:9000"; };
+      };
+    };
+  };
+}