.forgejo/workflows/plex_update.yml

@@ -0,0 +1,18 @@
+name: Plex Update
+on: [push]
+jobs:
+  native-test:
+    runs-on: native
+    steps:
+      - uses: actions/checkout@v3
+      - env:
+          VAULT_ADDR: ${{ secrets.VAULT_ADDR }}
+          VAULT_TOKEN: ${{ secrets.VAULT_TOKEN }}
+        run: |
+          git config user.name "Forgejo Actions Bot"
+          git config user.email "<>"
+          ./nixos/pkgs/plex-pass/update.sh
+          git add ./nixos/pkgs/plex-pass/
+          git commit -m "Update Plex"
+          git push origin actions-ci
+

.forgejo/workflows/test.yml

@@ -1,10 +0,0 @@
-name: Test
-on: [push]
-jobs:
-  setup-forgejo:
-    runs-on: nix-native
-    steps:
-      - uses: actions/checkout@v3
-      - run: |
-          ls
-          echo "Hello, World!"

nixos/hosts/olympus/woodpecker/configuration.nix

@@ -27,7 +27,9 @@ in {
     quoteEnvironmentValues = false; # Needed for docker
   };
 
-  vault-secrets.secrets.gitea_runner = { };
+  vault-secrets.secrets.gitea_runner = {
+    services = [ "gitea-runner-nix\x2dnative" ];
+  };
 
   virtualisation.podman = {
     enable = true;
@@ -59,7 +61,10 @@ in {
         gawk
         gitMinimal
         gnused
+        jq
         nodejs
+        nixUnstable
+        vault
         wget
       ];
     };

nixos/pkgs/plex-pass/update.sh

@@ -1,6 +1,4 @@
 #! /usr/bin/env bash
-
-set -x
 shopt -s extglob
 set -eu -o pipefail