penal-colony/nixos-vps
2
0
Fork 1
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat(kafka): complete kafka integration - service deployed and verified

Browse source
This commit is contained in:
ashisgreat22 2026-03-22 01:25:00 +00:00
parent 3858202855
commit 546569caf7
7 changed files with 127 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

9
modules/forgejo.nix
View file

@ -134,10 +134,17 @@
labels = cfg.runner.labels;
settings = {
container = {
network = "bridge";
network = "host";
};
};
};
};
# Fix: Bind mount Podman socket for gitea-runner
# With DynamicUser=true, SupplementaryGroups doesn't reliably work.
# BindPaths ensures the service can access the socket regardless of group membership.
systemd.services.gitea-runner-default = lib.mkIf cfg.runner.enable {
serviceConfig.BindPaths = [ "/run/podman/podman.sock" ];
};
};
}

21
modules/openclaw-config.json
View file

@ -24,7 +24,7 @@
"agents": {
"defaults": {
"model": {
"primary": "zai/glm-5"
"primary": "minimax/MiniMax-M2.7"
}
}
},
@ -52,6 +52,25 @@
{ "id": "glm-4.5-air", "name": "GLM 4.5 Air", "contextWindow": 128000, "maxTokens": 131072 },
{ "id": "glm-4.7-flash", "name": "GLM 4.7 Flash", "contextWindow": 128000, "maxTokens": 131072 }
]
},
"tng": {
"baseUrl": "https://api.tng-chimera.ai/v1/",
"apiKey": "${TNG_API_KEY}",
"api": "openai-completions",
"models": [
{ "id": "tngtech/R1T2-Chimera-Speed", "name": "TNG Chimera Speed", "contextWindow": 65536, "maxTokens": 65536 }
]
},
"minimax": {
"baseUrl": "https://api.minimax.io/anthropic",
"apiKey": "${MINIMAX_API_KEY}",
"api": "anthropic-messages",
"models": [
{ "id": "MiniMax-M2.7", "name": "MiniMax M2.7", "contextWindow": 200000, "maxTokens": 32768, "reasoning": true },
{ "id": "MiniMax-M2.5", "name": "MiniMax M2.5", "contextWindow": 200000, "maxTokens": 32768, "reasoning": true },
{ "id": "MiniMax-M2.5-highspeed", "name": "MiniMax M2.5 Highspeed", "contextWindow": 200000, "maxTokens": 32768, "reasoning": true },
{ "id": "MiniMax-VL-01", "name": "MiniMax VL 01", "contextWindow": 200000, "maxTokens": 32768 }
]
}
}
}

14
modules/openclaw-podman.nix
View file

@ -89,7 +89,7 @@ in
for skill_file in $REPO_SRC/skills/openclaw-native/*/SKILL.md; do
[ -f "$skill_file" ] || continue
skill_name=$(basename $(dirname "$skill_file"))
# Check if stateful: true in frontmatter
if sed -n '2,/^---$/p' "$skill_file" | grep -q '^stateful: *true'; then
mkdir -p "/var/lib/openclaw/skill-state/$skill_name"
@ -102,6 +102,18 @@ in
''}
'';
# Set git email for the node user inside the container
systemd.services."openclaw-git-config" = {
description = "Configure git email for OpenClaw node user";
after = [ "podman-openclaw.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
ExecStart = "${pkgs.podman}/bin/podman exec -u node openclaw git config --global user.email 'kafka@ashisgreat.xyz'";
RemainAfterExit = true;
};
};
# Go toolchain installation script
# Stored in /var/lib/openclaw and executed inside the container
environment.etc."openclaw/install-go.sh".source = pkgs.writeScript "install-go.sh" ''