{ pkgs, config, hostname, ... }: {

    # Set up the secret for the password:
    sops.secrets."services/forgejo_token" = {
        owner = "root";
        sopsFile = ../../../secrets/secrets.yaml;
    };

    services.gitea-actions-runner.package = pkgs.forgejo-actions-runner;
    services.gitea-actions-runner.instances."${hostname}" = {
        enable = true;
        name = "${hostname}";
        labels = [ "host://-self-hosted" ];
        url = "https://git.sysctl.io";
        tokenFile = "/run/secrets/services/forgejo_token";
    };
}