feat(buildbot-nix-0): add holo's github credentials

holochain · Sep 27, 2024 · d9936b0 · d9936b0
1 parent 798c7e0
commit d9936b0
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/modules/flake-parts/nixosConfigurations.buildbot-nix-0/configuration.nix b/modules/flake-parts/nixosConfigurations.buildbot-nix-0/configuration.nix
@@ -200,4 +200,8 @@ in
     enable = true;
     workerPasswordFile = config.sops.secrets.buildbot-nix-worker-password.path;
   };
+
+  sops.secrets.holo-host-github-environment-secrets = { };
+  systemd.services.nix-daemon.serviceConfig.EnvironmentFile =
+    config.sops.secrets.holo-host-github-environment-secrets.path;
 }
diff --git a/secrets/buildbot-nix-0/secrets.yaml b/secrets/buildbot-nix-0/secrets.yaml
@@ -19,6 +19,7 @@ buildbot-github-webhook-secret: ENC[AES256_GCM,data:uGBf61+hqBwRzbXhdzaJqR23smFB
 #
 buildbot-nix-workers: ENC[AES256_GCM,data:PfYOhXRZDjBl5pmZjTXr1a4fM5Fxqcnb3t9kdk37dmGMx7dqho7ke2546PiRJQSoJBZAe6jjxTgxI5UmU1VErItc0oJT3xSNDpuD8QqVuSQTZ+guAU4idRR6Hg==,iv:VA1NAGmsXC12XomWuIy1C9POPYFktJC9g5KsETFVVvM=,tag:XsUCniGlUg7IlJtSUkUmWw==,type:str]
 buildbot-nix-worker-password: ENC[AES256_GCM,data:96s+7HzGRAznb/3757jS+JnOXBI2yapm5FNgyferFs4=,iv:7cnQMrmGD0bhz9NWnM5n8G0WbhPfYo8g0usdd2IFRiA=,tag:FPHTk0Om17L1C4GzcK2hjQ==,type:str]
+holo-host-github-environment-secrets: ENC[AES256_GCM,data:DSJbIcRhOeSAQ+Foy0Ppdy/dTrIvv7cAZNKT6vZuQNoq/dbE/g355ilRwqN8CmTU10mEV4skOsCtLTZmeO9z6rI6QExDJLCwk8ZraFmafWCOBwS2IpjM2lRq2BzxjGOJqtx7NwQMgGTocDnuTXZM2CHHJVMu,iv:gINoXvkwdWvWoqV8DaG9gj8ar/rW7YCkkY2zxZs1S50=,tag:LpL4bStBzjyd4czPyroOAA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -43,8 +44,8 @@ sops:
             dGs4UHhrSnJmUjNiYzVKczdLRVYvKzQKDlU5u8aNvts2c4H7iWAiou24wrvuF/sS
             RnSnHCli2zywmLEYwBwVAzCynYrCcV+COFEYdOcUigjuji7O6GZA5Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-26T17:05:57Z"
-    mac: ENC[AES256_GCM,data:i4HffWFI0mgDqJl9vLBaRkFV3//o2QGWgqsTVAN4FRA/UAGIvX62Y5405jClresMnxUQJJKqhGyaKUAI1MwAc0vyTnSWA8Ntd2E+7At9NMYeZJGo7uJB+rFJzVJ2iPg/BTyCNKguYFvPylnrNjdYwVFw4odK9QUihm5CQ/sjHkc=,iv:DSNw0pXF9N5S5NvXM+N3daWlwcao6fdm5sRCmXLtc5Q=,tag:TOB3RcxXdXUFAW4gzKcvRA==,type:str]
+    lastmodified: "2024-09-27T14:06:53Z"
+    mac: ENC[AES256_GCM,data:KWkdipN1W1xdpa0qcJtOrHefvqeMq6OJFqum1RAZaEDrlroepWRSoYnP6lY5lSaD/rySEAjvhm4NilaCs2TBgnopVTkkrZAYC21niDtqcW5q5Kyt3xwhS/bWQ5eaBeGSH+tpvdyiVe8KCauaEoc5+QpKDI7LXTHkgSy383ztkpE=,iv:k+f0RDLn4hqfpneENHxw88/xRaRis7JdkUaThzoPkGw=,tag:1VPg1qMDUlY2WoMizoVufQ==,type:str]
     pgp:
         - created_at: "2024-09-26T10:03:38Z"
           enc: |-