about summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--ops/modules/monorepo-gerrit.nix10
-rw-r--r--ops/modules/tvl-buildkite.nix7
2 files changed, 14 insertions, 3 deletions
diff --git a/ops/modules/monorepo-gerrit.nix b/ops/modules/monorepo-gerrit.nix
index 714aeeaa6e..d9507db56e 100644
--- a/ops/modules/monorepo-gerrit.nix
+++ b/ops/modules/monorepo-gerrit.nix
@@ -3,10 +3,16 @@
 
 let
   cfg = config.services.gerrit;
+
+  besadiiWithConfig = pkgs.writeShellScript "besadii-whitby" ''
+    export BESADII_CONFIG=/etc/secrets/besadii.json
+    exec ${depot.ops.besadii}/bin/besadii
+  '';
+
   gerritHooks = pkgs.runCommandNoCC "gerrit-hooks" {} ''
     mkdir -p $out
-    ln -s ${depot.ops.besadii}/bin/besadii $out/change-merged
-    ln -s ${depot.ops.besadii}/bin/besadii $out/patchset-created
+    ln -s ${besadiiWithConfig} $out/change-merged
+    ln -s ${besadiiWithConfig} $out/patchset-created
   '';
 in {
   services.gerrit = {
diff --git a/ops/modules/tvl-buildkite.nix b/ops/modules/tvl-buildkite.nix
index 05a5e9b5e7..de14970100 100644
--- a/ops/modules/tvl-buildkite.nix
+++ b/ops/modules/tvl-buildkite.nix
@@ -6,11 +6,16 @@ let
   agents = lib.range 1 cfg.agentCount;
   description = "Buildkite agents for TVL";
 
+  besadiiWithConfig = pkgs.writeShellScript "besadii-whitby" ''
+    export BESADII_CONFIG=/etc/secrets/besadii.json
+    exec ${depot.ops.besadii}/bin/besadii
+  '';
+
   # All Buildkite hooks are actually besadii, but it's being invoked
   # with different names.
   buildkiteHooks = pkgs.runCommandNoCC "buildkite-hooks" {} ''
     mkdir -p $out/bin
-    ln -s ${depot.ops.besadii}/bin/besadii $out/bin/post-command
+    ln -s ${besadiiWithConfig} $out/bin/post-command
   '';
 in {
   options.services.depot.buildkite = {