feat: setup forgejo runner.

modules/servers/per-server/freyja/default.nix

@@ -9,6 +9,7 @@ in {
   imports =
     [
       ../../common
+      ./secrets.nix
     ]
     ++ hostModules;
 }

modules/servers/per-server/freyja/secrets.nix

@@ -0,0 +1,9 @@
+{
+  age = {
+    secrets = {
+      forgejo-runner-token = {
+        file = ../../../../secrets/forgejo-runner-token.age;
+      };
+    };
+  };
+}

modules/servers/per-server/freyja/services/forgejo-runner.nix

@@ -0,0 +1,25 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances.default = {
+      enable = true;
+      name = "monolith";
+      url = "https://git.cronyakatsuki.xyz";
+      # Obtaining the path to the runner token file may differ
+      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
+      tokenFile = config.age.secrets.forgejo-runner-token.path;
+      labels = [
+        "ubuntu-latest:docker://node:16-bullseye"
+        "ubuntu-22.04:docker://node:16-bullseye"
+        "ubuntu-20.04:docker://node:16-bullseye"
+        "ubuntu-18.04:docker://node:16-buster"
+        ## optionally provide native execution on the host:
+        "native:host"
+      ];
+    };
+  };
+}