rice/hosts/ami/woodpecker.nix

37 lines
854 B
Nix

{config, ...}: {
age.secrets.woodpecker.file = ../../secrets/woodpecker.age;
services = let
port = 3007;
in {
woodpecker-server = {
enable = true;
environment = {
WOODPECKER_OPEN = "true";
WOODPECKER_ORGS = "kitchen";
WOODPECKER_ADMIN = "chef";
WOODPECKER_HOST = "https://build.buffets.kitchen/";
WOODPECKER_SERVER_ADDR = ":${toString port}";
WOODPECKER_GITEA = "true";
WOODPECKER_GITEA_URL = "https://buffets.kitchen/";
};
environmentFile = config.age.secrets.woodpecker.path;
};
nginx = {
virtualHosts."build.buffets.kitchen" = {
useACMEHost = "buffet.sh";
forceSSL = true;
locations = {
"/" = {
proxyPass = "http://localhost:${toString port}";
};
};
};
};
};
}