v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

add regexmanager for docker inside of nix
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse source
This commit is contained in:
Vivian 2023-02-04 16:40:01 +01:00
parent 400d322454
commit 6ca5a4eb40
3 changed files with 80 additions and 75 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
flake.nix
View file

@ -109,30 +109,29 @@
default = colmena.packages.${system}.colmena; default = colmena.packages.${system}.colmena;
iso = nixos-generators.nixosGenerate { # iso = nixos-generators.nixosGenerate {
inherit system pkgs; # inherit system pkgs;
format = "iso"; # format = "iso";
modules = [ (import ./nixos/templates/iso.nix) ]; # modules = [ (import ./nixos/templates/iso.nix) ];
}; # };
iso-graphical = nixos-generators.nixosGenerate { # iso-graphical = nixos-generators.nixosGenerate {
inherit system pkgs; # inherit system pkgs;
format = "iso"; # format = "iso";
modules = [ (import ./nixos/templates/iso-graphical.nix) ]; # modules = [ (import ./nixos/templates/iso-graphical.nix) ];
}; # };
proxmox-lxc = nixos-generators.nixosGenerate { # proxmox-lxc = nixos-generators.nixosGenerate {
inherit pkgs; # inherit pkgs;
format = "proxmox-lxc"; # format = "proxmox-lxc";
modules = [ (import ./nixos/templates/proxmox-lxc.nix) ]; # modules = [ (import ./nixos/templates/proxmox-lxc.nix) ];
}; # };
# Currently broken as it assumes `local-lvm` exists # proxmox-vm = nixos-generators.nixosGenerate {
proxmox-vm = nixos-generators.nixosGenerate { # inherit system pkgs;
inherit system pkgs; # format = "proxmox";
format = "proxmox"; # modules = [ (import ./nixos/templates/proxmox-vm.nix) ];
modules = [ (import ./nixos/templates/proxmox-vm.nix) ]; # };
};
}; };
# Use by running `nix develop` # Use by running `nix develop`

111
flux/olympus/apps/services/renovate/config.yaml
View file

@ -1,58 +1,65 @@
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
metadata: metadata:
name: renovate name: renovate
namespace: services namespace: services
data: data:
config.js: |- config.js: |-
module.exports = { module.exports = {
"binarySource": "install", "binarySource": "install",
"repositories": ["v/infrastructure"], "repositories": ["v/infrastructure"],
"flux": { "flux": {
"fileMatch": ["flux/.+\\.ya?ml$"] "fileMatch": ["flux/.+\\.ya?ml$"]
}, },
"helm-values": { "helm-values": {
"fileMatch": ["flux/.+\\.ya?ml$"] "fileMatch": ["flux/.+\\.ya?ml$"]
}, },
"kubernetes": { "kubernetes": {
"fileMatch": ["flux/.+\\.ya?ml$"] "fileMatch": ["flux/.+\\.ya?ml$"]
}, },
"nix": { "nix": {
"enabled": true "enabled": true
}, },
"lockFileMaintenance": { "lockFileMaintenance": {
"enabled": true, "enabled": true,
"automerge": true, "automerge": true,
"automergeType": "branch", "automergeType": "branch",
"schedule": ["weekly"], "schedule": ["weekly"],
}, },
"hostRules": [ "hostRules": [
{ {
"hostType": "docker", "hostType": "docker",
"matchHost": "ghcr.io", "matchHost": "ghcr.io",
"username": "NULLx76", "username": "NULLx76",
"password": process.env.GITHUB_COM_TOKEN "password": process.env.GITHUB_COM_TOKEN
} }
],
"packageRules": [
{
"automerge": true,
"automergeType": "branch",
"matchPackageNames": [
"renovate/renovate"
], ],
"matchPackagePrefixes": [ "packageRules": [
"git.0x76.dev" {
"automerge": true,
"automergeType": "branch",
"matchPackageNames": [
"renovate/renovate"
],
"matchPackagePrefixes": [
"git.0x76.dev"
]
}
],
// ignore individual fluxcd images
"ignoreDeps": [
"ghcr.io/fluxcd/helm-controller",
"ghcr.io/fluxcd/image-automation-controller",
"ghcr.io/fluxcd/image-reflector-controller",
"ghcr.io/fluxcd/kustomize-controller",
"ghcr.io/fluxcd/notification-controller",
"ghcr.io/fluxcd/source-controller"
],
"regexManagers": [
{
"fileMatch": [".+\\.nix"],
"matchStrings": ["image\\s*=\\s*"(?<depName>.*?):(?<currentValue>.*?)"\\s*;\\s*"],
"datasourceTemplate": "docker"
}
] ]
} };
],
// ignore individual fluxcd images
"ignoreDeps": [
"ghcr.io/fluxcd/helm-controller",
"ghcr.io/fluxcd/image-automation-controller",
"ghcr.io/fluxcd/image-reflector-controller",
"ghcr.io/fluxcd/kustomize-controller",
"ghcr.io/fluxcd/notification-controller",
"ghcr.io/fluxcd/source-controller"
]
};

3
nixos/hosts/hades/overseerr/configuration.nix
View file

@ -26,8 +26,7 @@
backend = "podman"; backend = "podman";
containers = { containers = {
overseerr = { overseerr = {
# TODO: Add regex so that renovate catches this image = "ghcr.io/sct/overseerr:1.32.4";
image = "ghcr.io/sct/overseerr:1.32.5";
environment = { environment = {
# LOG_LEVEL = "debug"; # LOG_LEVEL = "debug";
TZ = "Europe/Amsterdam"; TZ = "Europe/Amsterdam";