asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci: run Renovate from asxpi/renovate
Some checks failed
nixos / asxpio-services (push) Failing after 54s
Details

Browse source 
Renovate now runs from its own repository for every repo, with the
shared rules in its preset. Extend that preset here and keep only what
is specific to this repo (the Ansible var manager, the Paper JRE, the
runner and nix notes); drop the workflow that ran it for iac alone.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 00:00:06 +04:00
commit 71047d179d
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
15 changed files with 705 additions and 284 deletions
Download patch file Download diff file Expand all files Collapse all files

46
nixos/hosts/asxpio-services/default.nix
View file

@ -1,9 +1,12 @@
# asxpio-services: CI runner, Minecraft, SillyTavern.
# asxpio-services: CI runner, Minecraft, XMPP, Xray, SillyTavern.
{ config, lib, ... }:
{
imports = [
./containers.nix
./replica.nix
./runner.nix
./xmpp.nix
./xray.nix
];
networking.hostName = lib.mkDefault "asxpio-services";
@ -59,27 +62,26 @@
};
# --- Firewall -----------------------------------------------------------
# The Hetzner firewall is the outer layer. Published container ports are
# forwarded by Podman and do not pass through these input rules.
networking.firewall = {
allowedTCPPorts = [
25565
25566
# The Hetzner firewall is the outer layer. Each service opens its own
# ports next to its definition.
networking.firewall.interfaces = {
asxpio-services.allowedTCPPorts = [
22
8000
];
enp7s0.allowedTCPPorts = [ 22 ];
};
# --- Backup -------------------------------------------------------------
# The Paper world is copied live (RCON is off, so there is no save-off);
# its autosave keeps that close enough. What Paper downloads again is
# left out.
asxpio.backup = {
schedule = "*-*-* 04:15:00";
excludes = [
"/opt/minecraft/cache"
"/opt/minecraft/libraries"
"/opt/minecraft/versions"
];
allowedUDPPorts = [ 19132 ];
interfaces = {
asxpio-services.allowedTCPPorts = [
22
8000
];
enp7s0.allowedTCPPorts = [ 22 ];
# CI job containers reach the runner's cache server on the host
"podman+".allowedTCPPortRanges = [
{
from = 1024;
to = 65535;
}
];
};
};
}