Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 20 additions & 8 deletions deployments/agicash-team-forge/configuration.nix
Original file line number Diff line number Diff line change
Expand Up @@ -61,25 +61,37 @@
sshKeys = sshPublicKeys;
};

# --- Secrets (uncomment after bootstrap) ---
# --- Secrets + first agent (uncomment after bootstrap) ---
#
# The forge `modules/secrets.nix` module wires sops-nix plumbing in
# the background. To start using encrypted secrets:
# the background. To start using encrypted secrets and the first
# agent:
# 1. Follow docs/secrets-bootstrap.md to generate an age key,
# register it in .sops.yaml, and create the encrypted
# secrets.yaml file.
# 2. Uncomment the block below to declare which keys are decrypted
# and which agents/bots consume them.
#
# The Discord bot manifest takes a path; sops produces that path at
# `/run/secrets/<name>`, which the existing schema accepts unchanged.
# secrets.yaml file containing `team-bot-token`.
# 2. Uncomment the block below: it declares the secret, the
# Discord bot that consumes it, and the first agent that uses
# the bot.
# 3. Redeploy. systemd starts `forge-agent-coordinator` on boot;
# the agent joins Discord and responds to @mentions.
#
# sops.secrets."team-bot-token" = {
# owner = "gudnuf";
# };
#
# services.forge.discord.bots.team = {
# tokenFile = config.sops.secrets."team-bot-token".path;
# };
#
# services.forge.agents.coordinator = {
# role = ''
# agicash team coordinator — the on-call agent in the team
# Discord channel. Listen for @mentions, respond helpfully,
# and learn the team's workflows as we collaborate.
# '';
# runAs = "gudnuf";
# discordBot = "team";
# };

# --- Nix GC ---
nix.gc = {
Expand Down
203 changes: 203 additions & 0 deletions flake.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 3 additions & 1 deletion flake.nix
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,10 @@
deploy-rs.url = "github:serokell/deploy-rs";
sops-nix.url = "github:Mic92/sops-nix";
sops-nix.inputs.nixpkgs.follows = "nixpkgs";
claude-code.url = "github:sadjow/claude-code-nix";
};

outputs = { self, nixpkgs, deploy-rs, sops-nix, ... }:
outputs = { self, nixpkgs, deploy-rs, sops-nix, claude-code, ... }:
let
system = "x86_64-linux";

Expand All @@ -35,6 +36,7 @@
];
specialArgs = {
inherit (agicashTeamForgeConfig) sshPublicKeys;
claudeCode = claude-code.packages.${system}.default;
};
};

Expand Down
1 change: 1 addition & 0 deletions modules/default.nix
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
./discord.nix
./agents.nix
./secrets.nix
./harnesses/claude-code.nix
];

options.services.forge = {
Expand Down
Loading