initial commit

renovate/config.js

@@ -0,0 +1,33 @@
+// lives at /etc/renovate/config.js
+// token goes in the same directory
+
+module.exports = {
+  platform: 'gitea',
+  endpoint: 'https://tildegit.org/api/v1/',
+  token: process.env.RENOVATE_TOKEN,
+  // repositories: ['MarkEEaton/teams-bot'],
+  // Or use autodiscover to find all repos
+  autodiscover: true,
+
+  enabledManagers: ['npm', 'nodenv', 'pip_requirements', 'pip_setup', 'poetry', 'pipenv', 'pep621'],
+  // Disable GitHub-specific features
+  fetchReleaseNotes: false,
+  githubTokenWarn: false,
+  
+  // Only use npm registry, PyPI, etc. - don't query GitHub
+  hostRules: [
+    {
+      hostType: 'github',
+      enabled: false,
+    }
+  ],
+
+  // this is so that renovate doesn't think that python-version is a dependency
+  packageRules: [
+    {
+      // Ignore Python version updates
+      matchDatasources: ['python-version'],
+      enabled: false,
+    }
+  ],
+};

renovate/renovate.service

@@ -0,0 +1,32 @@
+# lives at /etc/systemd/system/renovate.service
+
+[Unit]
+Description=Renovate Bot
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+User=renovate
+Group=renovate
+WorkingDirectory=/var/lib/renovate
+# /snap/bin is included first in the PATH because I needed a more up to 
+# date node.js than the system had, so I installed the newer version via 
+# snap. This path points to that first.
+Environment="PATH=/snap/bin:/usr/local/bin:/usr/bin:/bin"
+# load the token from the environment
+EnvironmentFile=/etc/renovate/token-env
+Environment="RENOVATE_CONFIG_FILE=/etc/renovate/config.js"
+Environment="GIT_AUTHOR_NAME=Renovate Bot"
+Environment="GIT_AUTHOR_EMAIL=b7jl@sdf.org"
+Environment="GIT_COMMITTER_NAME=Renovate Bot"
+Environment="GIT_COMMITTER_EMAIL=b7jl@sdf.org"
+# use the snap version of npx
+ExecStart=/snap/bin/npx renovate
+# Logging
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=renovate
+
+[Install]
+WantedBy=multi-user.target

renovate/renovate.timer

@@ -0,0 +1,15 @@
+# lives at /etc/systemd/system/renovate.timer
+
+[Unit]
+Description=Run Renovate Bot periodically
+Requires=renovate.service
+
+[Timer]
+# Run every 6 hours
+OnCalendar=00/6:00:00
+# Run 5 minutes after boot if we missed a scheduled run
+OnBootSec=5min
+Persistent=true
+
+[Install]
+WantedBy=timers.target