dotfiles/terranix/containers/hydra/default.nix
2023-06-29 18:59:38 +02:00

50 lines
1.2 KiB
Nix

{ config, elib, vars, ... }:
let
inherit (elib)
nfsVolume
nomadJob;
in
{
resource."nomad_volume"."hydra-db" = nfsVolume {
volume_name = "hydra-db";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/hydra-db";
mount_flags = [ "nfsvers=3" "hard" "async" ];
};
resource."nomad_volume"."hydra-data" = nfsVolume {
volume_name = "hydra-data";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/hydra-data";
mount_flags = [ "nfsvers=3" "hard" "async" ];
};
resource."nomad_volume"."hydra-nix" = nfsVolume {
volume_name = "hydra-nix";
access_mode = "single-node-writer";
server = "blowhole.hosts.in.redalder.org";
share = "/var/nfs/hydra-nix";
mount_flags = [ "nfsvers=3" "hard" "async" ];
};
resource."vault_policy"."hydra-policy" = {
name = "hydra-policy";
policy = ''
path "kv/data/hydra" {
capabilities = ["read"]
}
'';
};
resource."nomad_job"."hydra" = nomadJob {
jobspec = ./job.hcl;
vars = {
flake_ref = "${vars.flake_host}?rev=${vars.flake_rev}&ref=${vars.flake_ref}";
flake_sha = vars.flake_sha;
};
};
}