nix/nixos/common/services/forgejo-runner.nix

{ pkgs, config, hostname, ... }: {

    # Set up the secret for the password:
    sops.secrets."services/forgejo_token" = {
        owner = "gitea-runner";
        sopsFile = ../../../secrets/secrets.yaml;
    };

    services.gitea-actions-runner = {
        package = pkgs.gitea-actions-runner;
        instances."${hostname}" = {
            enable = true;
            name = "${hostname}";
            labels = [ "native:host" "nixos" ];
            url = "https://git.sysctl.io";
            tokenFile = "/run/secrets/services/forgejo_token";
        };
    };
}