qo.is/infrastructure
3
0
Fork 0
Code Issues 10 Pull requests 1 Projects Activity Actions

Fix renovate submodule cloning #29

Merged
fabianhauser merged 1 commit from 12-automatic-dependency-prs into main 2025-01-22 18:44:35 +01:00
Conversation 0 Commits 1 Files changed 5 +21 -7
5 changed files with 21 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
dev-shells/default.nix
View file

@ -24,6 +24,7 @@
++ (with pkgs; [ ++ (with pkgs; [
attic-client attic-client
deploy-rs deploy-rs
nixVersions.git
nixd nixd
nixfmt-rfc-style nixfmt-rfc-style
nixos-anywhere nixos-anywhere

8
flake.lock generated
View file

@ -111,11 +111,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1737489963, "lastModified": 1737552783,
"narHash": "sha256-1Qo3Qofx6W4s7tfvAKuq+hIUkkSRTU6j9PcDodM0hY4=", "narHash": "sha256-pJ2lp36L3++a5HtdN7ULcVpdB4j7yo90TDayWuAO+T8=",
"ref": "refs/heads/main", "ref": "refs/heads/main",
"rev": "d42933081c8149ee536b0300020d4f31b206f514", "rev": "33cf80043c64ddd6882268430454e3cbe98b692b",
"revCount": 10, "revCount": 11,
"type": "git", "type": "git",
"url": "file:./private" "url": "file:./private"
}, },

15
nixos-modules/qois/renovate/default.nix
View file

@ -2,6 +2,7 @@
config, config,
pkgs, pkgs,
lib, lib,
inputs,
... ...
}: }:
with lib; with lib;
@ -26,9 +27,14 @@ in
config = mkIf cfg.enable { config = mkIf cfg.enable {
sops.secrets."renovate/token".restartUnits = [ "renovate.service" ]; sops.secrets."renovate/token".restartUnits = [ "renovate.service" ];
sops.secrets."renovate/host_rules".restartUnits = [ "renovate.service" ];
systemd.services.renovate.environment.LOG_LEVEL = "debug";
services.renovate = { services.renovate = {
enable = true; enable = true;
credentials.RENOVATE_TOKEN = config.sops.secrets."renovate/token".path; credentials = {
RENOVATE_TOKEN = config.sops.secrets."renovate/token".path;
RENOVATE_HOST_RULES = config.sops.secrets."renovate/host_rules".path;
};
runtimePackages = with pkgs; [ runtimePackages = with pkgs; [
nix nix
]; ];
@ -41,5 +47,12 @@ in
}; };
schedule = "*:0/10"; schedule = "*:0/10";
}; };
systemd.services.renovate = {
path = mkBefore [ inputs.pkgs.nixVersions.git ]; # Circumvent submodule bug - remove after >=2.26 is the default.
script = mkBefore ''
echo -e "machine ${cfg.gitServer}\n login $(systemd-creds cat 'SECRET-RENOVATE_TOKEN')\n password x-oauth-basic" > ~/.netrc
'';
};
}; };
} }

2
private

@ -1 +1 @@
Subproject commit d42933081c8149ee536b0300020d4f31b206f514 Subproject commit 33cf80043c64ddd6882268430454e3cbe98b692b

2
renovate.json
View file

@ -1,6 +1,6 @@
{ {
"$schema": "https://docs.renovatebot.com/renovate-schema.json", "$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [ "config:base" ], "extends": [ "config:recommended" ],
"lockFileMaintenance": { "lockFileMaintenance": {
"enabled": true, "enabled": true,
"extends": [ "schedule:weekly" ] "extends": [ "schedule:weekly" ]