macs, builders: properly guard queue-builder secret deployment
Martin Weinelt committed
Mar 3, 2026 at 01:29 UTC
b8f894b0f597e6dbd5da97ab16576ce3dd4365ef
2 files changed
+22
-17
builders/common/hydra-queue-builder.nix
+11
-8
@@ -1,6 +1,7 @@
1
{
2
config,
3
inputs,
4
+ lib,
5
...
6
}:
7
@@ -9,14 +10,16 @@
10
inputs.hydra-queue-runner.nixosModules.queue-builder
11
];
12
12
- age.secrets."queue-runner-token" = {
13
- file = ../../build/secrets/${config.networking.hostName}-queue-runner-token.age;
14
- owner = "hydra-queue-builder";
15
- };
13
+ config = lib.mkIf false {
14
+ age.secrets."queue-runner-token" = {
15
+ file = ../../build/secrets/${config.networking.hostName}-queue-runner-token.age;
16
+ owner = "hydra-queue-builder";
17
+ };
18
17
- services.queue-builder-dev = {
18
- enable = false;
19
- queueRunnerAddr = "https://queue-runner.hydra.nixos.org";
20
- authorizationFile = config.age.secrets."queue-runner-token".path;
19
+ services.queue-builder-dev = {
20
+ enable = true;
21
+ queueRunnerAddr = "https://queue-runner.hydra.nixos.org";
22
+ authorizationFile = config.age.secrets."queue-runner-token".path;
23
+ };
24
};
25
}
macs/hydra-queue-builder.nix
+11
-9
@@ -11,15 +11,17 @@
11
inputs.hydra-queue-runner.darwinModules.queue-builder
12
];
13
14
- age.secrets."queue-runner-token" = {
15
- file = ../build/secrets/${config.networking.localHostName}-queue-runner-token.age;
16
- owner = "hydra-queue-builder";
17
- };
14
+ config = lib.mkIf false {
15
+ age.secrets."queue-runner-token" = {
16
+ file = ../build/secrets/${config.networking.localHostName}-queue-runner-token.age;
17
+ owner = "hydra-queue-builder";
18
+ };
19
19
- services.queue-builder-dev = {
20
- enable = false;
21
- queueRunnerAddr = "https://queue-runner.hydra.nixos.org";
22
- authorizationFile = config.age.secrets."queue-runner-token".path;
23
- maxJobs = if lib.elem "big-parallel" (config.nix.settings.system-features or [ ]) then 2 else 4;
20
+ services.queue-builder-dev = {
21
+ enable = true;
22
+ queueRunnerAddr = "https://queue-runner.hydra.nixos.org";
23
+ authorizationFile = config.age.secrets."queue-runner-token".path;
24
+ maxJobs = if lib.elem "big-parallel" (config.nix.settings.system-features or [ ]) then 2 else 4;
25
+ };
26
};
27
}