Sergei Poljanski
71047d179d
Some checks failed
nixos / asxpio-services (push) Failing after 54s
Renovate now runs from its own repository for every repo, with the shared rules in its preset. Extend that preset here and keep only what is specific to this repo (the Ansible var manager, the Paper JRE, the runner and nix notes); drop the workflow that ran it for iac alone. Assisted-by: Claude:opus-5-5
42 lines
1.3 KiB
Nix
42 lines
1.3 KiB
Nix
# Overrides that turn asxpio-services into a throwaway test machine:
|
|
# plain DHCP, SSH from anywhere, no WireGuard, dummy secrets.
|
|
{ lib, ... }:
|
|
let
|
|
manual.autoStart = lib.mkForce false;
|
|
in
|
|
{
|
|
networking.hostName = "rehearsal";
|
|
sops.defaultSopsFile = ../secrets/rehearsal.yaml;
|
|
|
|
systemd.network.networks = lib.mkForce {
|
|
"10-any" = {
|
|
matchConfig.Name = "en* eth*";
|
|
networkConfig.DHCP = "yes";
|
|
};
|
|
};
|
|
|
|
networking.wireguard.interfaces = lib.mkForce { };
|
|
systemd.services.docker-sillytavern = {
|
|
after = lib.mkForce [ ];
|
|
requires = lib.mkForce [ ];
|
|
};
|
|
virtualisation.oci-containers.containers = {
|
|
sillytavern.ports = lib.mkForce [ "127.0.0.1:8000:8000" ];
|
|
|
|
# With production data restored these would act as production: a
|
|
# second asxp.io XMPP server and Telegram session, a runner taking
|
|
# real CI jobs. Start them by hand, and only with test data.
|
|
xmpp-ejabberd = manual;
|
|
xmpp-apushd = manual;
|
|
xmpp-tackygram = manual;
|
|
forgejo-runner = manual;
|
|
xray = manual; # its config is a dummy
|
|
};
|
|
|
|
# No backups of, or from, a test machine
|
|
systemd.timers.restic-backup.enable = false;
|
|
systemd.timers.s3-replicate.enable = false;
|
|
|
|
services.openssh.openFirewall = lib.mkForce true;
|
|
services.openssh.settings.AllowUsers = [ "root" ];
|
|
}
|