Remove legit container; Remove Hydra; setup GitLab; setup GitLab runner; add GitLab CI definitions

system/age.nix

@@ -2,6 +2,7 @@
   age = {
     secrets = {
       cache-key.file = ../secrets/cache-key.age;
+      gitlab-runner.file = ../secrets/gitlab-runner.age;
       graf-email = {
         file = ../secrets/graf-email.age;
         mode = "770";

system/build-services.nix

@@ -1,25 +0,0 @@
-{ config, ... }: {
-  services = {
-    hydra = {
-      enable = true;
-      hydraURL = "https://hydra.matri.cx";
-      listenHost = "127.0.0.1";
-      port = 3034;
-
-      extraConfig = ''
-        using_frontend_proxy = 1
-        base_uri = "https://hydra.matri.cx"
-      '';
-
-      useSubstitutes = true;
-
-      notificationSender = "hydra@matri.cx";
-      buildMachinesFiles = [ ];
-    };
-
-    nix-serve = {
-      enable = true;
-      secretKeyFile = config.age.secrets.cache-key.path;
-    };
-  };
-}

system/dns.nix

@@ -28,6 +28,12 @@
       		    }
       		  }
 
+            box.eversole.co {
+      		    template IN A  {
+      		        answer "{{ .Name }} 0 IN A 149.28.112.101"
+      		    }
+      		  }
+
       		  *.eversole.co {
       		    template IN A  {
       		        answer "{{ .Name }} 0 IN A 192.168.0.130"

system/system.nix

@@ -1,5 +1,6 @@
 { pkgs, ... }: {
   boot = {
+    kernel.sysctl."net.ipv4.ip_forward" = true;
     loader.systemd-boot.enable = true;
     loader.efi.canTouchEfiVariables = true;
   };
@@ -14,5 +15,16 @@
     };
   };
 
+  programs.ssh.knownHosts = {
+    selbeiskami = {
+      hostNames = [ "192.168.0.57" ];
+      publicKey = "192.168.0.57 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiTyWzAu7V2Jkk4rqEjBLu+lAhhkLTO8W/PGb8HkeqQ";
+    };
+    matricx = {
+      hostNames = [ "192.168.0.130" "matri.cx" ];
+      publicKey = "matri.cx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMyaPYK0HcKAjrD1g+FPqPEU9FJ0I6+iKYmQlWKE0zHp";
+    };
+  };
+
   time.timeZone = "America/Chicago";
 }