Run Renovate locally
Renovate can now be configured as a NixOS service.
Needs secrets:
- Token with write access to repos
- SSH secret key
Pros:
- Can sign commits without the key ever leaving my machine
- Easier to debug runtime issues locally
- Can tear down entire Renovate repo
Cons:
- Risk of leaking secrets
Plan:
- Install & configure using private repo
- Evaluate security
- Move to root repo
Edited by Victor Engmark