+ text = ''
+ install -m 0755 -o buildbot -g buildbot -d /run/buildbot/
+ install -m 0755 -o buildbot -g buildbot -d ${varDir}
+ ${project.activationScript}
+ '';
+ }) myconfig.env.buildbot.projects;
+
+ deployment.keys = lib.attrsets.listToAttrs (
+ lib.lists.flatten (
+ lib.attrsets.mapAttrsToList (k: project:
+ lib.attrsets.mapAttrsToList (k: v:
+ lib.attrsets.nameValuePair "buildbot-${project.name}-${k}" {
+ permissions = "0600";
+ user = "buildbot";
+ group = "buildbot";
+ text = v;
+ destDir = "/run/keys/buildbot/${project.name}";
+ }
+ ) project.secrets
+ ++ [
+ (lib.attrsets.nameValuePair "buildbot-${project.name}-webhook-httpd-include" {
+ permissions = "0600";
+ user = "wwwrun";
+ group = "wwwrun";
+ text = lib.optionalString (lib.attrsets.hasAttr "webhookTokens" project) ''
+ Require expr "req('Access-Key') in { ${builtins.concatStringsSep ", " (map (x: "'${x}'") project.webhookTokens)} }"
+ '';
+ destDir = "/run/keys/buildbot/${project.name}";
+ })
+ ]
+ ) myconfig.env.buildbot.projects
+ )
+ ) // {
+ buildbot-ldap = {
+ permissions = "0600";
+ user = "buildbot";
+ group = "buildbot";
+ text = myconfig.env.buildbot.ldap.password;
+ destDir = "/run/keys/buildbot";
+ };
+ buildbot-ssh-key = {
+ permissions = "0600";
+ user = "buildbot";
+ group = "buildbot";
+ text = builtins.readFile "${myconfig.privateFiles}/buildbot_ssh_key";
+ destDir = "/run/keys/buildbot";
+ };
+ };
+
+ systemd.services = lib.attrsets.mapAttrs' (k: project: lib.attrsets.nameValuePair "buildbot-${project.name}" {
+ description = "Buildbot Continuous Integration Server ${project.name}.";
+ after = [ "network-online.target" "keys.target" ];
+ wants = [ "keys.target" ];
+ wantedBy = [ "multi-user.target" ];
+ path = project.packages pkgs ++ (project.pythonPackages buildbot.pythonModule pkgs);
+ preStart = let