meow

2026-09-13 14:33:29 -05:00
parent 060863f72f
commit 6089103cba
5 changed files with 177 additions and 1 deletions
@@ -0,0 +1,89 @@
+{
+  config,
+  lib,
+  pkgs,
+  hostInfo,
+  customPkgs,
+  ...
+}:
+let
+  cfg = config.services.server-autodeploy;
+in
+{
+  options.services.server-autodeploy = {
+    enable = lib.mkEnableOption "automatic deployment from signed git tags";
+
+    interval = lib.mkOption {
+      type = lib.types.str;
+      default = "15min";
+    };
+
+    branch = lib.mkOption {
+      type = lib.types.str;
+      default = "master";
+    };
+
+    giteaUrl = lib.mkOption {
+      type = lib.types.str;
+      default = "https://git.floweytf.com";
+    };
+
+    giteaRepo = lib.mkOption {
+      type = lib.types.str;
+      default = "server/server-config";
+    };
+
+    tokenFile = lib.mkOption {
+      type = lib.types.str;
+      default = "${hostInfo.paths.secrets}/gitea-autodeploy-token";
+    };
+
+    allowedSignersFile = lib.mkOption {
+      type = lib.types.str;
+      default = "${hostInfo.paths.secrets}/autodeploy-allowed-signers";
+    };
+
+    stateDir = lib.mkOption {
+      type = lib.types.str;
+      default = "/persist/@autodeploy";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    systemd.services.server-autodeploy = {
+      description = "Deploy latest signed tag";
+      after = [ "network-online.target" ];
+      wants = [ "network-online.target" ];
+
+      environment = {
+        GITEA_URL = cfg.giteaUrl;
+        GITEA_REPO = cfg.giteaRepo;
+        TOKEN_FILE = cfg.tokenFile;
+        ALLOWED_SIGNERS = cfg.allowedSignersFile;
+        DEPLOY_BRANCH = cfg.branch;
+        STATE_DIR = cfg.stateDir;
+        REPO_DIR = "/persist/@configuration";
+      };
+
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = lib.getExe customPkgs.server-autodeploy;
+        TimeoutStartSec = "30min";
+      };
+
+      path = [
+        config.nix.package
+        pkgs.nixos-rebuild
+      ];
+    };
+
+    systemd.timers.server-autodeploy = {
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnBootSec = "2min";
+        OnUnitActiveSec = cfg.interval;
+        RandomizedDelaySec = "2min";
+      };
+    };
+  };
+}