satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update workflow and sudo perms
Some checks are pending
Activate NixOS Homelab Configuration On Push / deploy (push) Waiting to run
Details

Browse source
This commit is contained in:
Satria 2026-03-14 20:59:04 +07:00
commit 22ac4b4b5e
2 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
.forgejo/workflows/activate.yml
View file

@ -10,7 +10,7 @@ env:
jobs: jobs:
deploy: deploy:
runs-on: nixos-server runs-on: nixos-server:host
defaults: defaults:
run: run:
shell: /bin/sh -e {0} shell: /bin/sh -e {0}
@ -38,4 +38,5 @@ jobs:
ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }} ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }}
- name: Deploy System over SSH - name: Deploy System over SSH
run: nixos-rebuild switch --flake ./src#homelab --target-host root@localhost -L --show-trace run: nixos-rebuild switch --flake ./src#homelab --target-host root@localhost -L --show-trace

7
modules/system/homelab/git.nix
View file

@ -1,4 +1,11 @@
{ lib, pkgs, homelab, ... }: { { lib, pkgs, homelab, ... }: {
security.sudo.extraRules = [{
users = [ "gitea-runner" ];
commands = [{
command = "/run/current-system/sw/bin/nixos-rebuild";
options = [ "NOPASSWD" ];
}];
}];
services = { services = {
forgejo = { forgejo = {
enable = true; enable = true;