Add runners to gitea

hosts/hermes/configuration.nix

@@ -1,6 +1,4 @@
 {
-  config,
-  lib,
   pkgs,
   inputs,
   ...
@@ -11,27 +9,22 @@
   nix.settings.experimental-features = ["nix-command" "flakes"];
   nixpkgs.config.allowUnfree = true;
 
-  # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
 
-  # Use latest kernel.
   boot.kernelPackages = pkgs.linuxPackages_latest;
 
-  networking.hostName = "Hermes"; # Define your hostname.
+  networking.hostName = "Hermes";
 
   networking.networkmanager.enable = true;
   networking.nameservers = ["1.1.1.1" "1.0.0.1"];
 
-  # Set your time zone.
   time.timeZone = "Europe/Berlin";
 
   users.users.nick = {
     isNormalUser = true;
     shell = pkgs.zsh;
-    extraGroups = ["wheel"]; # Enable ‘sudo’ for the user.
+    extraGroups = ["wheel"];
-    packages = with pkgs; [
-    ];
   };
 
   programs.zsh = {
@@ -54,6 +47,7 @@
     yazi
     dysk
     tmux
+    btop
   ];
 
   networking.firewall.enable = false;

modules/services/gitea.nix

@@ -1,10 +1,7 @@
-{
+{config, ...}: {
-  pkgs,
+  services = {
-  config,
+    # Gitea
-  lib,
+    gitea = {
-  ...
-}: {
-  services.gitea = {
       enable = true;
       database = {
         type = "sqlite3";
@@ -21,10 +18,32 @@
       };
     };
 
-  age.secrets.gitea-db = {
+    # Runner
+    gitea-actions-runner = {
+      instances.default = {
+        enable = true;
+        name = "hermes";
+        url = "https://git.nicknase27.com";
+        tokenFile = config.age.secrets.gitea-runner.path;
+        labels = [
+          "ubuntu-latest:docker://node:20-bookworm"
+        ];
+      };
+    };
+  };
+
+  age.secrets = {
+    gitea-db = {
       file = ../../secrets/gitea-db.age;
       path = "/run/secrets/gitea-db";
       owner = "gitea";
       group = "gitea";
     };
+    gitea-runner = {
+      file = ../../secrets/gitea-runner.age;
+      path = "/run/secrets/gitea-runner";
+      owner = "gitea-runner";
+      group = "gitea-runner";
+    };
+  };
 }

secrets/gitea-runner.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 dq4eSg qKA1uHB7R3fzousDFZYZjyFk5hwMpCDnf5dm3rN91SI
+w26bL7qFnr/KNDfVGXjC0Fq/DiUdXnPv9V3pxuKNHF0
+-> ssh-ed25519 xLUmZQ geY2dwlcPPLxaCrsO9F6i3FVwwFLORhQmlxwyBbkCSs
+JuSN0rlGCnuw8UBim6pB56AEBOs7TNeoaix2kvwt6AY
+--- I6A1HhkzWBgvjuex0wV6fFNF2mBKMPoV33G0Cub8xP4
+Ÿu
+ƒ
té·w¾÷¬ì8DiñC¸òÓ³’_ûÀ”/Î$ˆ\ÌRªÈR“<4nŠ‹ÍÒ`iÕ3‘JÃÔÙî¤sÿÎ¥òq´`î�®³òU

secrets/secrets.nix

@@ -8,6 +8,7 @@ in {
   "restic.age".publicKeys = systems;
   "smb.age".publicKeys = systems;
   "gitea-db.age".publicKeys = systems;
+  "gitea-runner.age".publicKeys = systems;
   "navidrome.age".publicKeys = systems;
   "vaultwarden.age".publicKeys = systems;
 }