From 36eb13de031d6cde63e0c617211c2272c53b6832 Mon Sep 17 00:00:00 2001
From: buffet <dev@buffet.sh>
Date: Sun, 23 Jun 2024 11:12:51 +0200
Subject: [PATCH 1/2] feat(woodpecker): use unstable.woodpecker for 2.6

---
 hosts/ami/woodpecker.nix |  4 ++--
 secrets/woodpecker.age   | 10 ++++++----
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/hosts/ami/woodpecker.nix b/hosts/ami/woodpecker.nix
index 4b61c12..9103c89 100644
--- a/hosts/ami/woodpecker.nix
+++ b/hosts/ami/woodpecker.nix
@@ -14,8 +14,8 @@
         WOODPECKER_HOST = "https://build.buffets.kitchen/";
         WOODPECKER_SERVER_ADDR = ":${toString port}";
 
-        WOODPECKER_GITEA = "true";
-        WOODPECKER_GITEA_URL = "https://buffets.kitchen/";
+        WOODPECKER_FORGEJO = "true";
+        WOODPECKER_FORGEJO_URL = "https://buffets.kitchen/";
       };
 
       environmentFile = config.age.secrets.woodpecker.path;
diff --git a/secrets/woodpecker.age b/secrets/woodpecker.age
index 455a15d..f7ce12f 100644
--- a/secrets/woodpecker.age
+++ b/secrets/woodpecker.age
@@ -1,5 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 zRvPWg J9ydyHYnmWE77Y8KaYOIkUqzv4B1Syp1EDi6DW4AaC8
-uvTZdpXqqnSL8UaSAMkQ1YZ50Latny0XqBehPpVm2dw
---- a+3mhk56fR9Q025HNLAMujPoxqdrYhMmOaBp1tZtoc0
-�����fv�$�Q|´���/��;�U��CoH��J�<�v��%���9�:���Ɂx������ج0��,T� ���mSg�R[Ȱ\�lU1��y~���3���Z�?[�y�����\3���`?J��7U$����dw�B�/�kC��RC��\�W��Nb$k{~>��u��PS1��
\ No newline at end of file
+-> ssh-ed25519 zRvPWg 2WXQR5WHrLyTNiJrf8E0cftYYjO0Gge0wQKFcptVeX4
+fthYF5yn1TPPuYfqqo549V/h/hsjZB3oTFHOkGlFwVM
+--- iMrfA6/y0mNyz0+dgTAOj2UJ4jw+ZqFPYSIMn/KLkEw
+f���吧ߑ�~����኿_@��ʋ�Z�I
��'3� 	�#�� 4P[�H��n yO6JM#m�u���~�]g
����I�Ňj�I��C��cO��
+
+d�����?b!�Q�x¯��Y,(�7�7���ް����:n_�Wƣt�ӵ���KႰ� `��kP],=,࿊5�ѡ�
\ No newline at end of file

From 5606571943fbae1b0a90635905d939279c8957ae Mon Sep 17 00:00:00 2001
From: buffet <dev@buffet.sh>
Date: Sun, 23 Jun 2024 11:57:25 +0200
Subject: [PATCH 2/2] feat(woodpecker): set up agent

---
 hosts/ami/woodpecker.nix |  24 +++++++++++++++++++++++-
 secrets/woodpecker.age   | Bin 358 -> 447 bytes
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/hosts/ami/woodpecker.nix b/hosts/ami/woodpecker.nix
index 9103c89..f771ea9 100644
--- a/hosts/ami/woodpecker.nix
+++ b/hosts/ami/woodpecker.nix
@@ -1,11 +1,17 @@
-{config, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
   age.secrets.woodpecker.file = ../../secrets/woodpecker.age;
 
   services = let
     port = 3007;
+    grpc-port = 9000;
   in {
     woodpecker-server = {
       enable = true;
+      package = pkgs.unstable.woodpecker-server;
 
       environment = {
         WOODPECKER_OPEN = "true";
@@ -13,6 +19,7 @@
         WOODPECKER_ADMIN = "chef";
         WOODPECKER_HOST = "https://build.buffets.kitchen/";
         WOODPECKER_SERVER_ADDR = ":${toString port}";
+        WOODPECKER_GRPC_ADDR = ":${toString port}";
 
         WOODPECKER_FORGEJO = "true";
         WOODPECKER_FORGEJO_URL = "https://buffets.kitchen/";
@@ -21,6 +28,21 @@
       environmentFile = config.age.secrets.woodpecker.path;
     };
 
+    woodpecker-agents.agents = {
+      podman = {
+        package = pkgs.unstable.woodpecker-agent;
+
+        environment = {
+          WOODPECKER_SERVER = "localhost:${toString grpc-port}";
+          WOODPECKER_BACKEND = "docker";
+          DOCKER_HOST = "unix:///run/podman/podman.sock";
+        };
+
+        environmentFile = config.age.secrets.woodpecker.path;
+        extraGroups = ["podman"];
+      };
+    };
+
     nginx = {
       virtualHosts."build.buffets.kitchen" = {
         useACMEHost = "buffet.sh";
diff --git a/secrets/woodpecker.age b/secrets/woodpecker.age
index f7ce12f457c718c155c7bbaa02749da78758990c..750faf7c51d6b1ab8cccfea6e243ea61aba580e8 100644
GIT binary patch
delta 413
zcmV;O0b>5<0>1;0EPr=nL{B+oM>lmya#eF~aByQ|SWi=Wa#eanOK(kXHfBwBVR~vy
zXILvUYYIa&cXe}NM`cQDb1PzMQbb`dY)e{bF?m!uQfz2VNjNb!GI~T}YC|h8FbXX#
zEg&yyLu^uRa6xWxNkeT)N-|njM`2e+NHuGCL_}sYGHYRTcz<M6LNIi8Q)ddVZ^8rf
z|Dd$-qQBg>VwqOFDlrS>fn^ie3QH_SjwhTMU;qAukrhe;vEQrK(Bc{ogu(*cDWpE)
zp<;QdTLr2-WeugEd*frTfl~;ctRhjE@Y1Y;ksn%URP%VMfUPDD6?GNHe7)FlerW(=
zLUTZ!jy*G5ZGS8fwQEr%C<o-}$tzu{OA=$x8i#PxYdxlcz+I9&DCwhL)STmmhu<j*
z(6l-HsMlhu6)0m`u=9x;UmmbQick(7b)v`|!Bw4IMH?cPmGoe^HriIbXAU4kLD%O_
z6LO(4i$Qaq@ZKEWizCUmm*bjEiHN_qQqFceU|iNh@)rEwd-}cKAQ(T_I1x!m{<vyM
HG=@y}$quo=

delta 323
zcmV-J0lfad1LgvdEPparSW!|nS4eV9c~nkmN^)j6MKEJ#bXi$yPcTPkWiWS9OGaaG
zbXH|pGzw;PXjw)zd2TUOP*8PQW^r+EH8eR^FK91lb81>bGjCKzNKb1=Y({rhO$se7
zEg)%4a%Mp`FL^L+PI-DTD`aO>K~HKjRZ28!cPm<PMo?K(Nq<dlFH1~oMRy8jtAm*3
zkf(p&k&1rS`ryXlioah#=I_djf?DuN0odjzGXm2f3GpML{2(+?Tj@xMp>7~~Pc}*m
zO(Sj5b>ixc{C?YAX94ry?-$oe<gyFJhib`5;OdP-@0`qIPm{O`3S|1h$lCQkVj-(h
zzjzM9uLal!>pWR3D33RnH<g!@-mtr*@RaonI&NRwSH`1s9=FrA*!rYP;exQlAYl3!
V&}&d#4lF$^;J=CzHI*9Cp{3R$jrITl