deployment/buildbot: init

2configs/deployment/buildbot/master.nix

@@ -0,0 +1,37 @@
+{...}@inputs:
+let
+  domain = "buildbot.euer.krebsco.de";
+in {
+
+  imports = [
+    inputs.buildbot-nix.nixosModules.buildbot-master
+  ];
+
+  services.nginx.virtualHosts."${domain}" = {
+    enableACME = true;
+    forceSSL = true;
+  };
+
+  sops.secrets.buildbot-github-oauth-secret = { };
+  sops.secrets.buildbot-github-token = { };
+  sops.secrets.buildbot-github-webhook-secret = { };
+  sops.secrets.buildbot-nix-workers = { };
+
+  services.buildbot-nix.master = {
+    enable = true;
+    admins = [ "makefu" ];
+    buildSystems = [ "x86_64-linux" "aarch64-linux" ];
+    inherit domain;
+    evalMaxMemorySize = "4096";
+    evalWorkerCount = 16;
+    workersFile = config.sops.secrets.buildbot-nix-workers.path;
+    github = {
+      tokenFile = config.sops.secrets.buildbot-github-token.path;
+      webhookSecretFile = config.sops.secrets.buildbot-github-webhook-secret.path;
+      oauthSecretFile = config.sops.secrets.buildbot-github-oauth-secret.path;
+      oauthId = "Ov23lizFP7t7qoE9FuDA";
+      user = "krebs-bob";
+      topic = "buildbot";
+    };
+  };
+}

2configs/deployment/buildbot/worker.nix

@@ -0,0 +1,12 @@
+{...}@inputs:
+{
+  imports = [
+    inputs.buildbot-nix.nixosModules.buildbot-worker
+  ];
+  sops.secrets.buildbot-github-nix-worker-password = { };
+
+  services.buildbot-nix.worker = {
+    enable = true;
+    workerPasswordFile = config.sops.secrets.buildbot-github-nix-worker-password.path;
+  };
+}