Add runners to gitea

hosts/hermes/configuration.nix

@@ -1,6 +1,4 @@
 {
-  config,
-  lib,
   pkgs,
   inputs,
   ...
@@ -11,27 +9,22 @@
   nix.settings.experimental-features = ["nix-command" "flakes"];
   nixpkgs.config.allowUnfree = true;
 
-  # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
-  # Use latest kernel.
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
-  networking.hostName = "Hermes"; # Define your hostname.
+  networking.hostName = "Hermes";
 
   networking.networkmanager.enable = true;
   networking.nameservers = ["1.1.1.1" "1.0.0.1"];
 
-  # Set your time zone.
   time.timeZone = "Europe/Berlin";
 
   users.users.nick = {
     isNormalUser = true;
     shell = pkgs.zsh;
-    extraGroups = ["wheel"]; # Enable ‘sudo’ for the user.
-    packages = with pkgs; [
-    ];
+    extraGroups = ["wheel"];
   };
 
   programs.zsh = {
@@ -54,6 +47,7 @@
     yazi
     dysk
     tmux
+    btop
   ];
 
   networking.firewall.enable = false;

modules/services/gitea.nix

@@ -1,30 +1,49 @@
-{
-  pkgs,
-  config,
-  lib,
-  ...
-}: {
-  services.gitea = {
-    enable = true;
-    database = {
-      type = "sqlite3";
-      passwordFile = "${config.age.secrets.gitea-db.path}";
-    };
-    settings = {
-      server = {
-        DOMAIN = "git.nicknase27.com";
-        ROOT_URL = "https://git.nicknase27.com";
+{config, ...}: {
+  services = {
+    # Gitea
+    gitea = {
+      enable = true;
+      database = {
+        type = "sqlite3";
+        passwordFile = "${config.age.secrets.gitea-db.path}";
       };
-      service = {
-        DISABLE_REGISTRATION = true;
+      settings = {
+        server = {
+          DOMAIN = "git.nicknase27.com";
+          ROOT_URL = "https://git.nicknase27.com";
+        };
+        service = {
+          DISABLE_REGISTRATION = true;
+        };
+      };
+    };
+
+    # Runner
+    gitea-actions-runner = {
+      instances.default = {
+        enable = true;
+        name = "hermes";
+        url = "https://git.nicknase27.com";
+        tokenFile = config.age.secrets.gitea-runner.path;
+        labels = [
+          "ubuntu-latest:docker://node:20-bookworm"
+        ];
       };
     };
   };
 
-  age.secrets.gitea-db = {
-    file = ../../secrets/gitea-db.age;
-    path = "/run/secrets/gitea-db";
-    owner = "gitea";
-    group = "gitea";
+  age.secrets = {
+    gitea-db = {
+      file = ../../secrets/gitea-db.age;
+      path = "/run/secrets/gitea-db";
+      owner = "gitea";
+      group = "gitea";
+    };
+    gitea-runner = {
+      file = ../../secrets/gitea-runner.age;
+      path = "/run/secrets/gitea-runner";
+      owner = "gitea-runner";
+      group = "gitea-runner";
+    };
   };
 }

secrets/gitea-runner.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 dq4eSg qKA1uHB7R3fzousDFZYZjyFk5hwMpCDnf5dm3rN91SI
+w26bL7qFnr/KNDfVGXjC0Fq/DiUdXnPv9V3pxuKNHF0
+-> ssh-ed25519 xLUmZQ geY2dwlcPPLxaCrsO9F6i3FVwwFLORhQmlxwyBbkCSs
+JuSN0rlGCnuw8UBim6pB56AEBOs7TNeoaix2kvwt6AY
+--- I6A1HhkzWBgvjuex0wV6fFNF2mBKMPoV33G0Cub8xP4
+Ÿu
+ƒ
té·w¾÷¬ì8DiñC¸òÓ³’_ûÀ”/Î$ˆ\ÌRªÈR“<4nŠ‹ÍÒ`iÕ3‘JÃÔÙî¤sÿÎ¥òq´`î�®³òU

secrets/secrets.nix

@@ -8,6 +8,7 @@ in {
   "restic.age".publicKeys = systems;
   "smb.age".publicKeys = systems;
   "gitea-db.age".publicKeys = systems;
+  "gitea-runner.age".publicKeys = systems;
   "navidrome.age".publicKeys = systems;
   "vaultwarden.age".publicKeys = systems;
 }