wip: jenkins

Signed-off-by: jolheiser <john.olheiser@gmail.com>

machines/dragonwell/caddy.nix

@@ -80,7 +80,9 @@ in
       "dnd.jolheiser.com".extraConfig = ''
         reverse_proxy localhost:30000
       '';
-
+      "ci.jolheiser.com".extraConfig = ''
+        reverse_proxy localhost:2423
+      '';
     };
   };
 }

machines/dragonwell/default.nix

@@ -12,6 +12,7 @@ in
     ./git-pr.nix
     ./golink.nix
     ./gotosocial.nix
+    ./jenkins.nix
     ./restic.nix
     ./soju.nix
     ./tandoor.nix

machines/dragonwell/jenkins.nix

@@ -0,0 +1,25 @@
+{ config, ... }:
+{
+  age.secrets.jenkins.file = ../../secrets/personal/jenkins.age;
+  services.jenkins = {
+    enable = true;
+    listenAddress = "localhost";
+    port = 2423;
+    jobBuilder = {
+      enable = false; # Currently broken
+      accessTokenFile = config.age.secrets.jenkins.path;
+      nixJobs = [
+        {
+          job = {
+            name = "echo";
+            builders = [
+              {
+                shell = "echo 'Hello, world!'";
+              }
+            ];
+          };
+        }
+      ];
+    };
+  };
+}

secrets/personal/jenkins.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 E8j6/g AJiLqqUpu/SLAFvz6EXvZ6o1PXa1DrcBjf94gpEFq10
+ZYHjqsJ8tVer0YlJvJ11XQYx6P8FlB5Nj8Gr4BYZlCw
+-> ssh-ed25519 f31uNA 0iFxySw9nqD6uhCyFTND0cNLAWnAcKVDhbP5dzizXGk
+lr/gjZxUP0Ta8cRw24Zf26TLQmw+fRlElPqZvXR5d9g
+-> @>-grease
+0Y9PU1g/9/KPNt0XjFcHHsL36Txo/gKyedRC524UAu/OpX6Ob8TDN1DOKvlG9HQN
+cmcvJ5sKHDfh0MCef1FnZM2vhSxINm/WE2AYpjs
+--- 6RV0T/JXRFKZDzFFtqFTjLIdZTETLW6MVRcuHqz5tkw
+ò	ž	6C„W¿J\Ý?0å‹/;®Iˆ ÃϬp
+«ù€¡Ô׃<EFBFBD>jßUûQ‹ÉéÉh™…

secrets/secrets.nix

@@ -49,4 +49,8 @@ in
     jolheiser
     dragonwell
   ];
+  "personal/jenkins.age".publicKeys = [
+    jolheiser
+    dragonwell
+  ];
 }