Forgejo runner

systems/x86_64-linux/stargate/services/forgejo.nix

@@ -52,8 +52,39 @@ in {
     };
   };
 
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.default = {
+      enable = true;
+      name = "stargate";
+      url = "https://git.kylekrein.com";
+      # gitea.com/gitea/act_runner/src/branch/main/internal/pkg/config/config.example.yaml
+      settings = {
+        runner = {
+          capacity = 4;
+        };
+      };
+      # Obtaining the path to the runner token file may differ
+      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
+      tokenFile = config.sops.secrets."services/forgejo/runner".path;
+      hostPackages = with pkgs; [
+        nix
+      ];
+      labels = [
+        #"ubuntu-latest:docker://node:16-bullseye"
+        ## optionally provide native execution on the host:
+        "native:host"
+        "nixos:host"
+      ];
+    };
+  };
+
   sops.secrets."services/forgejo/mailer" = {
     mode = "400";
     owner = "forgejo";
   };
+  sops.secrets."services/forgejo/runner" = {
+    mode = "400";
+    owner = "forgejo";
+  };
 }