From 5606571943fbae1b0a90635905d939279c8957ae Mon Sep 17 00:00:00 2001
From: buffet <dev@buffet.sh>
Date: Sun, 23 Jun 2024 11:57:25 +0200
Subject: [PATCH] feat(woodpecker): set up agent

---
 hosts/ami/woodpecker.nix |  24 +++++++++++++++++++++++-
 secrets/woodpecker.age   | Bin 358 -> 447 bytes
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/hosts/ami/woodpecker.nix b/hosts/ami/woodpecker.nix
index 9103c89..f771ea9 100644
--- a/hosts/ami/woodpecker.nix
+++ b/hosts/ami/woodpecker.nix
@@ -1,11 +1,17 @@
-{config, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
   age.secrets.woodpecker.file = ../../secrets/woodpecker.age;
 
   services = let
     port = 3007;
+    grpc-port = 9000;
   in {
     woodpecker-server = {
       enable = true;
+      package = pkgs.unstable.woodpecker-server;
 
       environment = {
         WOODPECKER_OPEN = "true";
@@ -13,6 +19,7 @@
         WOODPECKER_ADMIN = "chef";
         WOODPECKER_HOST = "https://build.buffets.kitchen/";
         WOODPECKER_SERVER_ADDR = ":${toString port}";
+        WOODPECKER_GRPC_ADDR = ":${toString port}";
 
         WOODPECKER_FORGEJO = "true";
         WOODPECKER_FORGEJO_URL = "https://buffets.kitchen/";
@@ -21,6 +28,21 @@
       environmentFile = config.age.secrets.woodpecker.path;
     };
 
+    woodpecker-agents.agents = {
+      podman = {
+        package = pkgs.unstable.woodpecker-agent;
+
+        environment = {
+          WOODPECKER_SERVER = "localhost:${toString grpc-port}";
+          WOODPECKER_BACKEND = "docker";
+          DOCKER_HOST = "unix:///run/podman/podman.sock";
+        };
+
+        environmentFile = config.age.secrets.woodpecker.path;
+        extraGroups = ["podman"];
+      };
+    };
+
     nginx = {
       virtualHosts."build.buffets.kitchen" = {
         useACMEHost = "buffet.sh";
diff --git a/secrets/woodpecker.age b/secrets/woodpecker.age
index f7ce12f457c718c155c7bbaa02749da78758990c..750faf7c51d6b1ab8cccfea6e243ea61aba580e8 100644
GIT binary patch
delta 413
zcmV;O0b>5<0>1;0EPr=nL{B+oM>lmya#eF~aByQ|SWi=Wa#eanOK(kXHfBwBVR~vy
zXILvUYYIa&cXe}NM`cQDb1PzMQbb`dY)e{bF?m!uQfz2VNjNb!GI~T}YC|h8FbXX#
zEg&yyLu^uRa6xWxNkeT)N-|njM`2e+NHuGCL_}sYGHYRTcz<M6LNIi8Q)ddVZ^8rf
z|Dd$-qQBg>VwqOFDlrS>fn^ie3QH_SjwhTMU;qAukrhe;vEQrK(Bc{ogu(*cDWpE)
zp<;QdTLr2-WeugEd*frTfl~;ctRhjE@Y1Y;ksn%URP%VMfUPDD6?GNHe7)FlerW(=
zLUTZ!jy*G5ZGS8fwQEr%C<o-}$tzu{OA=$x8i#PxYdxlcz+I9&DCwhL)STmmhu<j*
z(6l-HsMlhu6)0m`u=9x;UmmbQick(7b)v`|!Bw4IMH?cPmGoe^HriIbXAU4kLD%O_
z6LO(4i$Qaq@ZKEWizCUmm*bjEiHN_qQqFceU|iNh@)rEwd-}cKAQ(T_I1x!m{<vyM
HG=@y}$quo=

delta 323
zcmV-J0lfad1LgvdEPparSW!|nS4eV9c~nkmN^)j6MKEJ#bXi$yPcTPkWiWS9OGaaG
zbXH|pGzw;PXjw)zd2TUOP*8PQW^r+EH8eR^FK91lb81>bGjCKzNKb1=Y({rhO$se7
zEg)%4a%Mp`FL^L+PI-DTD`aO>K~HKjRZ28!cPm<PMo?K(Nq<dlFH1~oMRy8jtAm*3
zkf(p&k&1rS`ryXlioah#=I_djf?DuN0odjzGXm2f3GpML{2(+?Tj@xMp>7~~Pc}*m
zO(Sj5b>ixc{C?YAX94ry?-$oe<gyFJhib`5;OdP-@0`qIPm{O`3S|1h$lCQkVj-(h
zzjzM9uLal!>pWR3D33RnH<g!@-mtr*@RaonI&NRwSH`1s9=FrA*!rYP;exQlAYl3!
V&}&d#4lF$^;J=CzHI*9Cp{3R$jrITl