From 76f9723f6acb7826c36a9dcbae026a83698a209e Mon Sep 17 00:00:00 2001
From: Julien Malka <julien@malka.sh>
Date: Tue, 21 Nov 2023 11:16:03 +0100
Subject: [PATCH] gitlab-runner: update

---
 machines/tower/default.nix        | 8 ++++++++
 machines/x2100/default.nix        | 2 --
 modules/gitlab-runner/default.nix | 1 +
 3 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/machines/tower/default.nix b/machines/tower/default.nix
index 421208d..5edbba1 100644
--- a/machines/tower/default.nix
+++ b/machines/tower/default.nix
@@ -109,11 +109,19 @@
 
 
   services.nginx.virtualHosts."phd.julienmalka.me" = {
+    basicAuthFile = "/home/gitlab-runner/nginx_auth";
     enableACME = true;
     forceSSL = true;
+    extraConfig = ''
+      autoindex on;
+      autoindex_localtime on;
+    '';
     root = "/home/gitlab-runner/artifacts";
   };
 
+  systemd.services.nginx.serviceConfig.ProtectHome = "read-only";
+  systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/gitlab-runner/artifacts" ];
+
 
   services.grafana.enable = true;
   services.grafana.settings.server.http_port = 3000;
diff --git a/machines/x2100/default.nix b/machines/x2100/default.nix
index 74084fd..baae763 100644
--- a/machines/x2100/default.nix
+++ b/machines/x2100/default.nix
@@ -40,8 +40,6 @@
 
   networking.wireless.enable = false;
 
-  programs.hyprland.enable = true;
-  programs.hyprland.package = pkgs.hyprland;
   environment.sessionVariables = {
     LIBSEAT_BACKEND = "logind";
   };
diff --git a/modules/gitlab-runner/default.nix b/modules/gitlab-runner/default.nix
index fb9530c..9c90a87 100644
--- a/modules/gitlab-runner/default.nix
+++ b/modules/gitlab-runner/default.nix
@@ -106,6 +106,7 @@ in
         home = "/home/gitlab-runner";
         isNormalUser = true;
         createHome = true;
+        homeMode = "705";
       };
       nix.settings.allowed-users = [ "gitlab-runner" ];
       nix.settings.trusted-users = [ "gitlab-runner" ];