satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

workflow verbosity and sudo fix
Some checks failed
Activate NixOS Homelab Configuration On Push / build-and-activate (push) Failing after 29s
Details

Browse source
This commit is contained in:
Satria 2026-03-14 10:33:04 +07:00
commit 6024695830
2 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/system/homelab/git.nix
View file

@ -1,4 +1,4 @@
{ pkgs, homelab, ... }: {
{ lib, pkgs, homelab, ... }: {
security.sudo.extraRules = [{ # for configuration activation on push to git
users = [ "gitea-runner" ];
commands = [{
@ -63,4 +63,10 @@
hostPackages = with pkgs; [ bash coreutils git nix nodejs ];
};
};
systemd.services."gitea-runner-nixos-deploy".serviceConfig = {
# Force systemd to allow privilege escalation (sudo) for this service
NoNewPrivileges = lib.mkForce false;
RestrictSUIDSGID = lib.mkForce false;
PrivateUsers = lib.mkForce false;
};
}