nix/nixos/common/services/forgejo-runner.nix

{ pkgs, config, hostname, ... }: {

  # Set up the secret for the password:
  sops.secrets."services/forgejo_token" = {
    owner = "root";
    sopsFile = ../../../secrets/secrets.yaml;
  };

    services.forgejo-actions-runner.instances."${hostname}" = {
        enable = true;
        name = "${hostname}";
        labels = [ "nixos" ];
        url = "https://git.sysctl.io";
        tokenFile = "/run/secrets/services/forgejo_token";
    };
}