From 853b85d94fbda00560668ad8d9ccf4cb566459b2 Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Sat, 14 Mar 2026 09:01:01 +0100
Subject: [PATCH] feat: some more settings for the forgejo runner.

---
 .../per-server/baldur/services/forgejo-runner.nix    | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/modules/servers/per-server/baldur/services/forgejo-runner.nix b/modules/servers/per-server/baldur/services/forgejo-runner.nix
index fe98352..6a8a95d 100644
--- a/modules/servers/per-server/baldur/services/forgejo-runner.nix
+++ b/modules/servers/per-server/baldur/services/forgejo-runner.nix
@@ -9,13 +9,12 @@
       enable = true;
       name = "monolith";
       url = "https://git.cronyakatsuki.xyz";
-      # Obtaining the path to the runner token file may differ
-      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
       tokenFile = config.age.secrets.forgejo-runner-token.path;
       labels = [
         ## optionally provide native execution on the host:
         "debian-latest:docker://node:18-bullseye"
         "native:host"
+        "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04"
       ];
       hostPackages = with pkgs; [
         bash
@@ -33,4 +32,13 @@
   };
 
   environment.systemPackages = with pkgs; [attic-client];
+
+  nix.settings.trusted-users = ["root" "gitea-runner" "@wheel"];
+
+  swapDevices = [
+    {
+      device = "/var/lib/swapfile";
+      size = 16 * 1024; # 16 GB
+    }
+  ];
 }