diff --git a/flake.lock b/flake.lock index b78d95b..6809fc2 100644 --- a/flake.lock +++ b/flake.lock @@ -64,16 +64,16 @@ "treefmt-nix": "treefmt-nix" }, "locked": { - "lastModified": 1721409873, - "narHash": "sha256-h0njWQRvtkjK0NJ/Kgj76sXBhWwq5HGJm7OMcigmNw4=", - "ref": "refs/heads/refactor", - "rev": "54bba654d4279dfd112345b6470547851feb1457", - "revCount": 267, + "lastModified": 1721685540, + "narHash": "sha256-sIFaurUhoxZBahwfXpHRfMk41FexvULOe03qRBe7uiA=", + "ref": "refs/heads/non-flakes", + "rev": "3c903f14c25d87f4fb0b3a0ee7e860b6fa5b2d96", + "revCount": 290, "type": "git", "url": "https://git.lix.systems/lix-project/buildbot-nix.git" }, "original": { - "ref": "refs/heads/refactor", + "ref": "refs/heads/non-flakes", "type": "git", "url": "https://git.lix.systems/lix-project/buildbot-nix.git" } diff --git a/flake.nix b/flake.nix index 352985a..9e508fa 100644 --- a/flake.nix +++ b/flake.nix @@ -17,7 +17,7 @@ nix-gerrit.url = "git+https://git.lix.systems/the-distro/nix-gerrit.git"; nix-gerrit.inputs.nixpkgs.follows = "nixpkgs"; - buildbot-nix.url = "git+https://git.lix.systems/lix-project/buildbot-nix.git?ref=refs/heads/refactor"; + buildbot-nix.url = "git+https://git.lix.systems/lix-project/buildbot-nix.git?ref=refs/heads/non-flakes"; buildbot-nix.inputs.nixpkgs.follows = "nixpkgs"; lix.follows = "hydra/lix"; diff --git a/services/buildbot/default.nix b/services/buildbot/default.nix index 1eb7543..f771d60 100644 --- a/services/buildbot/default.nix +++ b/services/buildbot/default.nix @@ -32,7 +32,11 @@ in age.secrets.buildbot-workers.file = ../../secrets/buildbot-workers.age; age.secrets.buildbot-service-key.file = ../../secrets/buildbot-service-key.age; age.secrets.buildbot-signing-key.file = ../../secrets/buildbot-signing-key.age; - age.secrets.buildbot-remote-builder-key.file = ../../secrets/buildbot-remote-builder-key.age; + age.secrets.buildbot-remote-builder-key = { + file = ../../secrets/buildbot-remote-builder-key.age; + owner = "buildbot-worker"; + group = "buildbot-worker"; + }; services.nginx.virtualHosts.${cfg.domain} = { forceSSL = true; @@ -58,7 +62,7 @@ in (_: lib.foldl' lib.add 0) (lib.concatMap (m: map (s: { ${s} = m.maxJobs; }) m.systems) - config.nix.buildMachines)) + config.services.buildbot-nix.coordinator.buildMachines)) ); }; @@ -67,6 +71,8 @@ in inherit (cfg) domain; + debugging.enable = true; + oauth2 = { name = "Lix"; clientId = "forkos-buildbot";