48 lines
1.2 KiB
Nix
48 lines
1.2 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
virtualisation.docker.enable = true;
|
|
|
|
users.users.drone-runner = {
|
|
isSystemUser = true;
|
|
group = "drone-runner";
|
|
home = "/var/lib/drone-runner";
|
|
createHome = true;
|
|
};
|
|
users.groups.drone-runner = { };
|
|
users.groups.docker.members = [ "drone-runner" ];
|
|
|
|
systemd.services.drone-runner = {
|
|
description = "Drone Runner (CI CD Service)";
|
|
after = [ "network.target" ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
path = [ pkgs.docker ];
|
|
|
|
serviceConfig = {
|
|
# Type = "simple";
|
|
Name = "drone-runner";
|
|
User = "drone-runner";
|
|
Group = "drone-runner";
|
|
Restart = "always";
|
|
ExecStartPre= ''
|
|
-${pkgs.docker}/bin/docker stop %n \
|
|
${pkgs.docker}/bin/docker rm %n
|
|
'';
|
|
ExecStart= ''
|
|
${pkgs.docker}/bin/docker run --rm --name %n \
|
|
--volume=/var/run/docker.sock:/var/run/docker.sock \
|
|
--env-file=/run/secrets/drone-runner \
|
|
--env=DRONE_RPC_PROTO=https \
|
|
--env=DRONE_RPC_HOST=drone.cloonar.com \
|
|
--env=DRONE_RUNNER_CAPACITY=2 \
|
|
drone/drone-runner-docker:1.8.3
|
|
'';
|
|
};
|
|
};
|
|
|
|
sops.secrets.drone-runner = {
|
|
owner = config.systemd.services.drone-runner.serviceConfig.User;
|
|
key = "drone";
|
|
};
|
|
}
|