modules/hydra/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

{ self, config, lib, pkgs, ... }:

with self.lib.nginx;
{
  services.hydra = {
    enable = true;
    hydraURL = "https://hydra.vapor.systems";
    notificationSender = "hydra@localhost";
    buildMachinesFiles = [ ];
    useSubstitutes = true;
    extraConfig = lib.readFile ./hydra.conf;
  };

  secrets =
    let
      owner = "hydra";
      group = "hydra";
      permissions = "0440";
    in
    {
      hydraLdap = {
        inherit owner group permissions;
        source = ../../secrets/hydra/ldap-password.conf;
        dest = "/var/lib/hydra/ldap-password.conf";
      };

      hydraGit = {
        inherit owner group permissions;
        source = ../../secrets/hydra/git.conf;
        dest = "/var/lib/hydra/git.conf";
      };

      hydraPrivKey = {
        inherit owner group permissions;
        source = ../../secrets/hydra/priv.key;
        dest = "/var/lib/hydra/priv.key";
      };

      hydraPubKey = {
        inherit owner group permissions;
        source = ../../secrets/hydra/pub.key;
        dest = "/var/lib/hydra/pub.key";
      };
    };

  services.nginx = {
    enable = true;
    virtualHosts = {
      "hydra.vapor.systems" = (proxyDomain "vapor.systems" "http://127.0.0.1:3000/");
    };
  };
}