chayleaf/dotfiles
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

ci: some fixes

Browse source 
more fixes are still needed
This commit is contained in:
chayleaf 2023-07-28 13:19:43 +07:00
parent 86c5ee4e05
commit 9f93d0cbcf
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
system/hosts/nixserver/home.nix
View file

@ -82,6 +82,11 @@ in {
secretKeyFile = "/secrets/cache-priv-key.pem"; secretKeyFile = "/secrets/cache-priv-key.pem";
}; };
nix.settings.allowed-users = [ "nix-serve" "hydra" ]; nix.settings.allowed-users = [ "nix-serve" "hydra" ];
# only hydra has access to this file anyway
nix.settings.extra-builtins-file = "/etc/nixos/private/extra-builtins.nix";
nix.settings.allowed-uris = [
"https://git.sr.ht/~rycee/nmd/"
];
services.nginx.virtualHosts."binarycache.${cfg.domainName}" = { services.nginx.virtualHosts."binarycache.${cfg.domainName}" = {
quic = true; quic = true;
enableACME = true; enableACME = true;
@ -105,14 +110,17 @@ in {
boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
nix.buildMachines = [ nix.buildMachines = [
{ {
# there were some bugs related to not specifying the machine
# not sure they're still there, but it surely won't hurt
hostName = "localhost"; hostName = "localhost";
protocol = null; protocol = null;
maxJobs = 8;
supportedFeatures = [ "kvm" "local" "nixos-test" "benchmark" "big-parallel" ]; supportedFeatures = [ "kvm" "local" "nixos-test" "benchmark" "big-parallel" ];
systems = [ "builtin" "x86_64-linux" "i686-linux" "aarch64-linux" ]; systems = [ "builtin" "x86_64-linux" "i686-linux" "aarch64-linux" ];
} }
]; ];
# limit CI CPU usage since I'm running everything else off this server too # limit CI CPU usage since I'm running everything else off this server too
# systemd.services.nix-daemon.serviceConfig.CPUQuota = "50%"; systemd.services.nix-daemon.serviceConfig.CPUQuota = "50%";
systemd.services.hydra-evaluator.serviceConfig.CPUQuota = "50%"; systemd.services.hydra-evaluator.serviceConfig.CPUQuota = "50%";
programs.ccache.enable = true; programs.ccache.enable = true;