plumjam/nixos - Change K2QR5DH4B46SHW4YYNROPVXPNQ7PYEUL6ZNILU3CDHJBYJFZLBNAC

ai: Fix keys, and add claude-code to CI runners with fixed user.

Created by PlumJam on December 31, 2025

K2QR5DH4B46SHW4YYNROPVXPNQ7PYEUL6ZNILU3CDHJBYJFZLBNAC

Dependencies

In channels

main

Change contents

Replacement in modules/common/ai.nix at line 20 [6.3345]
B:BD[5.946] → [5.946:968]
```
  age.secrets.key = {
```
[5.946]
[7.1360]
```
  age.secrets.z-ai-key = {
```

Replacement in modules/common/ai.nix at line 40 [6.3345]

B:BD[5.1349] → [5.1349:1435]

            --run 'export ANTHROPIC_AUTH_TOKEN=$(cat ${config.age.secrets.key.path})'

[5.1349]

[5.1435]

            --run 'export ANTHROPIC_AUTH_TOKEN=$(cat ${config.age.secrets.z-ai-key.path})'

Replacement in modules/common/ai.nix at line 179 [6.3345]

B:BD[8.1190] → [8.1190:1268]

        #     Authorization = "Bearer {file:${config.age.secrets.key.path}}";

[8.1190]

[8.1268]

        #     Authorization = "Bearer {file:${config.age.secrets.z-ai-key.path}}";

Replacement in modules/common/ai.nix at line 187 [6.3345]

B:BD[8.1631] → [8.1631:1709]

        #     Authorization = "Bearer {file:${config.age.secrets.key.path}}";

[8.1631]

[8.1709]

        #     Authorization = "Bearer {file:${config.age.secrets.z-ai-key.path}}";

Replacement in modules/common/ai.nix at line 265 [6.3345]

B:BD[9.537] → [9.537:615]

              Authorization = "Bearer {file:${config.age.secrets.key.path}}";

[9.537]

[9.615]

              Authorization = "Bearer {file:${config.age.secrets.z-ai-key.path}}";

Replacement in modules/common/ai.nix at line 273 [6.3345]

B:BD[9.783] → [9.783:861]

              Authorization = "Bearer {file:${config.age.secrets.key.path}}";

[9.783]

[9.861]

              Authorization = "Bearer {file:${config.age.secrets.z-ai-key.path}}";

Replacement in modules/common/ai.nix at line 487 [6.3345]

B:BD[4.3610] → [4.3610:3944]

        claude mcp add -s user -t http web-reader https://api.z.ai/api/mcp/web_reader/mcp --header "Authorization: Bearer $(cat ${config.age.secrets.key.path})"
        claude mcp add -s user -t http web-search-prime https://api.z.ai/api/mcp/web_search_prime/mcp --header "Authorization: Bearer $(cat ${config.age.secrets.key.path})"

[4.3610]

[4.3944]

        claude mcp add -s user -t http web-reader https://api.z.ai/api/mcp/web_reader/mcp --header "Authorization: Bearer $(cat ${config.age.secrets.z-ai-key.path})"
        claude mcp add -s user -t http web-search-prime https://api.z.ai/api/mcp/web_search_prime/mcp --header "Authorization: Bearer $(cat ${config.age.secrets.z-ai-key.path})"

File deletion: 4a9dde1ee26b27507434bbb055826cde-key.age
BF:BFD[7.1955] → [3.738:809]
BF:BFD[3.809] → [3.434:434]
B:BD[3.434] → [3.435:737]
File addition: 4a9dde1ee26b27507434bbb055826cde-z-ai-key.age (----------)
[7.1955]
File deletion: 3a1c7bc4d9ce25afd77a7d48ec8c4610-key.age
BF:BFD[7.5321] → [3.1191:1262]
BF:BFD[3.1262] → [3.826:826]
B:BD[3.826] → [3.827:1190]
File addition: 3a1c7bc4d9ce25afd77a7d48ec8c4610-z-ai-key2.age (----------)
[7.5321]
File addition: 3a1c7bc4d9ce25afd77a7d48ec8c4610-z-ai-key.age (----------)
[7.5321]
Replacement in hosts/plum/git-runners/default.nix at line 1 [10.2000]
B:BD[10.2000] → [2.155:195]
```
{ pkgs, lib, config, inputs, ... }: let
```
[10.2000]
[10.2033]
```
{ self, pkgs, lib, config, inputs, ... }: let
```

Insertion in hosts/plum/git-runners/default.nix at line 5 [10.2000]

[10.2538]

[11.874]


  age.secrets.z-ai-key2 = {
    rekeyFile = self + /modules/common/z-ai-key.age;
  };

Insertion in hosts/plum/git-runners/default.nix at line 35 [10.2000]

[2.424]

[11.1229]


        inputs.claude-code.packages.${pkgs.stdenv.hostPlatform.system}.default

Insertion in hosts/plum/default.nix at line 87 [12.987]

[10.3812]

          };
          gitea-runner = {
            description  = "gitea-runner";
            isSystemUser = true;
            group        = "gitea-runner";

Insertion in hosts/plum/default.nix at line 95 [12.987]
[13.197]
[13.197]
```
        users.groups.gitea-runner = {};
```
File deletion: 4f9c1aea321cba9b42bb07bf5fe736e7-key.age
BF:BFD[7.13619] → [3.1636:1707]
BF:BFD[3.1707] → [3.1296:1296]
B:BD[3.1296] → [3.1297:1635]
File addition: 4f9c1aea321cba9b42bb07bf5fe736e7-z-ai-key.age (----------)
[7.13619]
File deletion: f88fe8d8fae7fb5df68e60276f3f307f-key.age
BF:BFD[7.16983] → [3.2073:2144]
BF:BFD[3.2144] → [3.1719:1719]
B:BD[3.1719] → [3.1720:2072]
File addition: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key2.age (----------)
[7.16983]
File addition: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key.age (----------)
[7.16983]
Insertion in hosts/kiwi/git-runners/default.nix at line 5 [10.5552]
[10.6099]
[11.2272]

Insertion in hosts/kiwi/git-runners/default.nix at line 31 [10.5552]

[2.958]

[11.2627]


        inputs.claude-code.packages.${pkgs.stdenv.hostPlatform.system}.default

Insertion in hosts/kiwi/default.nix at line 85 [12.1791]

[14.7015]

          };
          gitea-runner = {
            description  = "gitea-runner";
            isSystemUser = true;
            group        = "gitea-runner";

Replacement in hosts/kiwi/default.nix at line 94 [12.1791]

B:BD[15.239] → [15.239:281]

        users.groups.github2forgejo = {};

[15.239]

[15.281]

        users.groups = {
          github2forgejo = {};
          gitea-runner   = {};
        };

File deletion: 40c224509da479bd43d99ad3248be467-key.age
BF:BFD[7.23756] → [3.2543:2614]
BF:BFD[3.2614] → [3.2175:2175]
B:BD[3.2175] → [3.2176:2542]
File addition: 40c224509da479bd43d99ad3248be467-z-ai-key.age (----------)
[7.23756]

ai: Fix keys, and add claude-code to CI runners with fixed user.

Dependencies

In channels

Change contents

Replacement in modules/common/ai.nix at line 20 [6.3345]

Replacement in modules/common/ai.nix at line 40 [6.3345]

Replacement in modules/common/ai.nix at line 179 [6.3345]

Replacement in modules/common/ai.nix at line 187 [6.3345]

Replacement in modules/common/ai.nix at line 265 [6.3345]

Replacement in modules/common/ai.nix at line 273 [6.3345]

Replacement in modules/common/ai.nix at line 487 [6.3345]

File deletion: 4a9dde1ee26b27507434bbb055826cde-key.age

File addition: 4a9dde1ee26b27507434bbb055826cde-z-ai-key.age (----------)

File deletion: 3a1c7bc4d9ce25afd77a7d48ec8c4610-key.age

File addition: 3a1c7bc4d9ce25afd77a7d48ec8c4610-z-ai-key2.age (----------)

File addition: 3a1c7bc4d9ce25afd77a7d48ec8c4610-z-ai-key.age (----------)

Replacement in hosts/plum/git-runners/default.nix at line 1 [10.2000]

Insertion in hosts/plum/git-runners/default.nix at line 5 [10.2000]

Insertion in hosts/plum/git-runners/default.nix at line 35 [10.2000]

Insertion in hosts/plum/default.nix at line 87 [12.987]

Insertion in hosts/plum/default.nix at line 95 [12.987]

File deletion: 4f9c1aea321cba9b42bb07bf5fe736e7-key.age

File addition: 4f9c1aea321cba9b42bb07bf5fe736e7-z-ai-key.age (----------)

File deletion: f88fe8d8fae7fb5df68e60276f3f307f-key.age

File addition: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key2.age (----------)

File addition: f88fe8d8fae7fb5df68e60276f3f307f-z-ai-key.age (----------)

Insertion in hosts/kiwi/git-runners/default.nix at line 5 [10.5552]

Insertion in hosts/kiwi/git-runners/default.nix at line 31 [10.5552]

Insertion in hosts/kiwi/default.nix at line 85 [12.1791]

Replacement in hosts/kiwi/default.nix at line 94 [12.1791]

File deletion: 40c224509da479bd43d99ad3248be467-key.age

File addition: 40c224509da479bd43d99ad3248be467-z-ai-key.age (----------)