maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tazjin/koptevo): deploy tgsa

Browse source 
The main instance is still running on polyanka, but things are moving
in this direction.

Change-Id: Idfa9e508023c05148003ac4621ae01dceb284c66
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8827
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
This commit is contained in:
Vincent Ambo 2023-06-18 15:25:45 +03:00 • committed by tazjin
parent 332a821100
commit 507cd85264
2 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
users/tazjin/nixos/modules/tgsa.nix
View file

@ -6,11 +6,15 @@
wantedBy = [ "multi-user.target" ];
serviceConfig = {
EnvironmentFile = "/root/tgsa-env"; # TODO(tazjin): automate this
DynamicUser = true;
Restart = "always";
ExecStart = "${depot.users.tazjin.tgsa}/bin/tgsa";
LoadCredential = "tgsa-yandex.json:/run/agenix/tgsa-yandex";
};
script = ''
export YANDEX_KEY_FILE="''${CREDENTIALS_DIRECTORY}/tgsa-yandex.json"
${depot.users.tazjin.tgsa}/bin/tgsa
'';
};
services.nginx.virtualHosts."tgsa" = {