test hydra jobs

test hydra jobs test hydra jobs test hydra jobs test hydra jobs hydra add signing key flake restructure secrets: rekey secrets: rekey hydra fix key path hydra fix key path services: hydra: typo in nix.conf
2024-05-20 10:29:52 +02:00
parent 9f9d8e3a3b
commit fa914bce1d
24 changed files with 147 additions and 124 deletions
--- a/modules/services/dmz/hydra.nix
+++ b/modules/services/dmz/hydra.nix
@@ -7,5 +7,27 @@
      notificationSender = "hydra@localhost";
      useSubstitutes = true;
    };
+    
+    networking.firewall = {
+      enable = true;
+      #allowedUDPPorts = [  ];
+      allowedTCPPorts = [ 3000 ];
+    };
+
+    nix = {
+      settings.trusted-users = [
+        "hydra"
+      ];
+
+      extraOptions = ''
+        secret-key-files = ${config.age.secrets."keys/nixsign".path}
+      '';
+    };
+    
+    age.secrets."keys/nixsign" = {
+      file = ../../../secrets/keys/nixservepriv.age;
+      owner = "hydra";
+    };
+

 }