fix dhcp lease to unbount, git runner and openconnect keepalive

hosts/fw.cloonar.com/modules/gitea.nix

@@ -100,6 +100,9 @@ in
     };
   };
 
+
+  sops.secrets.gitea-runner-token = { };
+
   services.gitea-actions-runner.instances.main = {
     enable = true;
     url = "https://git.cloonar.com";

hosts/fw.cloonar.com/modules/home-assistant/light.nix

@@ -59,7 +59,7 @@
           "light.kitchen_lights"
           "light.livingroom_lights"
           "light.hallway_lights"
-          "light.bathroom_light"
+          "light.bathroom_lights"
           "light.toilett_lights"
           "light.storage_lights"
         ];

hosts/fw.cloonar.com/modules/openconnect.nix

@@ -19,4 +19,22 @@ in
       };
     };
   };
+
+
+  systemd.services.openconnect-wrwks-keepalive = {
+    serviceConfig.Type = "oneshot";
+    path = with pkgs; [ bash ];
+    script = ''
+      ping -c 2 stage.wsw.at
+    '';
+  };
+
+  systemd.timers.openconnect-wrwks-keepalive = {
+    wantedBy = [ "timers.target" ];
+    partOf = [ "openconnect-wrwks-keepalive.service" ];
+    timerConfig = {
+      OnCalendar = "*:0/1";
+      Unit = "openconnect-wrwks-keepalive.service";
+    };
+  };
 }

hosts/fw.cloonar.com/modules/unbound.nix

@@ -148,8 +148,8 @@ in {
         hostPath = "${config.security.acme.certs.${domain}.directory}";
         isReadOnly = true;
       };
-      "/var/lib/kea/dhcp4.leases" = {
-        hostPath = "/var/lib/kea/dhcp4.leases";
+      "/var/lib/kea" = {
+        hostPath = "/var/lib/kea";
         isReadOnly = true;
       };
     };
@@ -220,9 +220,10 @@ in {
           } 
           
           function syncFile() {
+            # readFileUnique "''\$1" "''\$2"
+            while true; do
               readFileUnique "''\$1" "''\$2"
-            while inotifywait -e close_write,create "''\$1" ; do
-              readFileUnique "''\$1" "''\$2"
+              sleep 10
             done 
           }