asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci: run Renovate from asxpi/renovate
Some checks failed
nixos / asxpio-services (push) Failing after 54s
Details

Browse source 
Renovate now runs from its own repository for every repo, with the
shared rules in its preset. Extend that preset here and keep only what
is specific to this repo (the Ansible var manager, the Paper JRE, the
runner and nix notes); drop the workflow that ran it for iac alone.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 00:00:06 +04:00
commit 71047d179d
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
15 changed files with 705 additions and 284 deletions
Download patch file Download diff file Expand all files Collapse all files

22
nixos/hosts/rehearsal.nix
View file

@ -1,6 +1,9 @@
# Overrides that turn asxpio-services into a throwaway test machine:
# plain DHCP, SSH from anywhere, no WireGuard, dummy secrets.
{ lib, ... }:
let
manual.autoStart = lib.mkForce false;
in
{
networking.hostName = "rehearsal";
sops.defaultSopsFile = ../secrets/rehearsal.yaml;
@ -13,11 +16,26 @@
};
networking.wireguard.interfaces = lib.mkForce { };
systemd.services.podman-sillytavern = {
systemd.services.docker-sillytavern = {
after = lib.mkForce [ ];
requires = lib.mkForce [ ];
};
virtualisation.oci-containers.containers.sillytavern.ports = lib.mkForce [ "127.0.0.1:8000:8000" ];
virtualisation.oci-containers.containers = {
sillytavern.ports = lib.mkForce [ "127.0.0.1:8000:8000" ];
# With production data restored these would act as production: a
# second asxp.io XMPP server and Telegram session, a runner taking
# real CI jobs. Start them by hand, and only with test data.
xmpp-ejabberd = manual;
xmpp-apushd = manual;
xmpp-tackygram = manual;
forgejo-runner = manual;
xray = manual; # its config is a dummy
};
# No backups of, or from, a test machine
systemd.timers.restic-backup.enable = false;
systemd.timers.s3-replicate.enable = false;
services.openssh.openFirewall = lib.mkForce true;
services.openssh.settings.AllowUsers = [ "root" ];