nixdev — Development & CI

Purpose

nixdev is the development and CI host. It runs the self-hosted development services: continuous integration, Coder workspace platform, workflow automation, a Docker registry, and a forgesync mirror job.

Entry Point

• Main file: hosts/server/nixdev/default.nix
• Supporting files: automation.nix, ci.nix, coder.nix, forgesync.nix, registry.nix, woodpecker.nix

Architecture / Services / Scope

CI / Automation

• Woodpecker CI: Self-hosted CI server + local Docker-backed agent, supporting GitHub and Codeberg forges. Served on its own vhost with a separate gRPC agent endpoint.
• GitHub Actions runners: A pool of 10 self-hosted nixos-runner-* runners for the nix-config repo.

Workspaces

• Coder: Self-hosted development workspaces, backed by the Docker daemon. Coder users are granted Docker access.

Workflow Automation

• n8n: Workflow automation with task runners, backed by PostgreSQL and Redis on the Database Coordinator.

Registry & Mirroring

• Docker Registry: Self-hosted OCI registry storing images on the Storage Coordinator, with htpasswd auth.
• Forgesync: Mirrors repositories between Codeberg and GitHub on a daily schedule.

Secrets

Declared secrets

Operational Notes / Assumptions

• Runs Docker with auto-pruning for workspaces and CI workloads.
• Woodpecker, n8n, Coder, the registry, and CI are exposed through the IO Coordinator reverse proxy.
• Databases are provided by the Database Coordinator; n8n and Woodpecker depend on the database availability target.

References

• Woodpecker CI
• Coder
• n8n
• Database Coordinator
• Storage Coordinator
• IO Coordinator