Torjus Håkestad
cf19ade34b
Add a second runner instance (actions-native) that executes jobs directly on the host, giving workflows persistent nix store access and automatic binary cache population via Harmonia. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
126 lines
2.9 KiB
HCL
126 lines
2.9 KiB
HCL
variable "vault_address" {
|
|
description = "OpenBao server address"
|
|
type = string
|
|
default = "https://vault01.home.2rjus.net:8200"
|
|
}
|
|
|
|
variable "vault_token" {
|
|
description = "OpenBao root or admin token"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "vault_skip_tls_verify" {
|
|
description = "Skip TLS verification (for self-signed certs)"
|
|
type = bool
|
|
default = true
|
|
}
|
|
|
|
variable "nats_nkey" {
|
|
description = "NATS NKey for alerttonotify"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "pve_exporter_config" {
|
|
description = "PVE exporter YAML configuration"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "ns_xfer_key" {
|
|
description = "DNS zone transfer TSIG key"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "wireguard_private_key" {
|
|
description = "WireGuard private key for http-proxy"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "cache_signing_key_02" {
|
|
description = "Nix binary cache signing key (nix-cache02)"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "homelab_deploy_listener_nkey" {
|
|
description = "NKey seed for homelab-deploy listeners"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "homelab_deploy_test_deployer_nkey" {
|
|
description = "NKey seed for test-tier deployer"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "homelab_deploy_admin_deployer_nkey" {
|
|
description = "NKey seed for admin deployer"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "homelab_deploy_builder_nkey" {
|
|
description = "NKey seed for homelab-deploy builder"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "homelab_deploy_scheduler_nkey" {
|
|
description = "NKey seed for scheduled build triggering"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "nixos_exporter_nkey" {
|
|
description = "NKey seed for nixos-exporter NATS authentication"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "garage_env" {
|
|
description = "Garage environment file contents (GARAGE_RPC_SECRET and GARAGE_ADMIN_TOKEN)"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "radarr_api_key" {
|
|
description = "Radarr API key for exportarr metrics"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "sonarr_api_key" {
|
|
description = "Sonarr API key for exportarr metrics"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "forgejo_runner_token" {
|
|
description = "Forgejo Actions runner token for nix-cache02"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|
|
variable "forgejo_native_runner_token" {
|
|
description = "Forgejo Actions runner token for native nix runner on nix-cache02"
|
|
type = string
|
|
default = "PLACEHOLDER"
|
|
sensitive = true
|
|
}
|
|
|