lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: attempts to implement continuous builds via Forgejo trigger

Browse source
This commit is contained in:
Lewis Wynne 2026-04-07 12:35:15 +01:00
parent 9073f45dc3
commit 1276e9b5f7
1 changed files with 64 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

65
hosts/lab/wynne.nix
View file

@ -2,6 +2,7 @@
let
port = 4322;
dataDir = "/srv/wynne";
repo = "https://git.ily.rs/lew/wynne";
in
{
services.caddy.virtualHosts."wynne.rs" = {
@ -19,7 +20,8 @@ in
systemd.services.wynne = {
description = "wynne.rs";
after = [ "network.target" ];
after = [ "wynne-rebuild.service" ];
wants = [ "wynne-rebuild.service" ];
wantedBy = [ "multi-user.target" ];
environment = {
HOST = "127.0.0.1";
@ -37,6 +39,67 @@ in
};
};
# Always rebuilds because wynne bakes DB content (guestbook) into pages at build time
systemd.services.wynne-rebuild = {
description = "Clone/pull and build wynne.rs";
after = [ "network-online.target" ];
wants = [ "network-online.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = false;
ExecStart = pkgs.writeShellScript "rebuild-wynne" ''
set -euo pipefail
if [ ! -d ${dataDir}/repo/.git ]; then
mkdir -p ${dataDir}
${pkgs.git}/bin/git clone ${repo} ${dataDir}/repo
fi
mkdir -p ${dataDir}/data
cd ${dataDir}/repo
${pkgs.git}/bin/git fetch origin
${pkgs.git}/bin/git reset --hard origin/main
${pkgs.pnpm}/bin/pnpm install --frozen-lockfile
${pkgs.pnpm}/bin/pnpm build
'';
# + prefix runs this line as root (wynne user can't restart services)
ExecStartPost = "+/run/current-system/sw/bin/systemctl restart wynne";
User = "wynne";
Group = "wynne";
ReadWritePaths = [ dataDir ];
};
};
# Watches a trigger file, starts wynne-rebuild when touched
systemd.paths.wynne-rebuild-trigger = {
description = "Watch for wynne rebuild trigger";
wantedBy = [ "multi-user.target" ];
pathConfig = {
PathModified = "${dataDir}/trigger";
Unit = "wynne-rebuild.service";
};
};
systemd.services.wynne-webhook = {
description = "Webhook listener for wynne.rs";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "simple";
ExecStart = let
hooks = pkgs.writeText "wynne-hooks.json" (builtins.toJSON [{
id = "wynne-rebuild";
execute-command = "/run/current-system/sw/bin/touch";
pass-arguments-to-command = [
{ source = "string"; name = "${dataDir}/trigger"; }
];
}]);
in "${pkgs.webhook}/bin/webhook -hooks ${hooks} -port ${toString (port + 1)} -verbose";
Restart = "always";
User = "wynne";
Group = "wynne";
};
};
users.users.wynne = {
isSystemUser = true;
group = "wynne";