dotfiles/terranix/main/containers/gitea/default.nix

66 lines
1.3 KiB
Nix
Raw Normal View History

{
elib,
tflib,
config',
vars,
...
}: let
inherit
(elib)
nfsVolume
nomadJob
;
inherit
(tflib)
tf
;
in {
resource."nomad_volume"."gitea-db" = nfsVolume {
volume_name = "gitea-db";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/mnt/kyle/infrastructure/gitea/database";
mount_flags = ["hard" "vers=4.2" "rsize=16384" "wsize=16384" "async"];
};
resource."nomad_volume"."gitea-data" = nfsVolume {
volume_name = "gitea-data";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/mnt/kyle/infrastructure/gitea/data";
mount_flags = ["hard" "vers=4.2" "rsize=16384" "wsize=16384" "async"];
};
resource."vault_policy"."gitea-policy" = {
name = "gitea-policy";
policy = ''
path "kv/data/cluster/gitea/gitea" {
capabilities = ["read"]
}
'';
};
imports = [
(elib.buildNixNGSystem {
name = "gitea";
hosts = [
"blowhole.hosts.in.redalder.org"
];
})
];
resource."nomad_job"."gitea" = nomadJob {
jobspec = ./job.hcl;
vars = {
flake_ref = "unused";
flake_sha = "unused";
store_path = tf "data.external.nixng-system-gitea.result.out";
};
depends_on = [
"terraform_data.nixng-system-gitea-copy"
];
};
}