hydra add signing key

2024-05-25 10:50:37 +02:00
parent c496cd67cf
commit fde868427a
21 changed files with 145 additions and 126 deletions
--- a/modules/services/dmz/hydra.nix
+++ b/modules/services/dmz/hydra.nix
@@ -7,5 +7,27 @@
      notificationSender = "hydra@localhost";
      useSubstitutes = true;
    };
+    
+    networking.firewall = {
+      enable = true;
+      #allowedUDPPorts = [  ];
+      allowedTCPPorts = [ 3000 ];
+    };
+
+    nix = {
+      settings.trusted-users = [
+        "hydra"
+      ];
+
+      extraOptions = ''
+        secret-key-files = config.age.secrets."keys/nixservepriv".path;
+      '';
+    };
+    
+    age.secrets."keys/nixservepriv" = {
+      file = ../../../secrets/keys/nixservepriv.age;
+      owner = "hydra";
+    };
+

 }