adjust builder

.forgejo/workflows/push.yaml

@@ -1,9 +1,9 @@
 on: [push]
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: native:host
     steps:
       # - uses: DeterminateSystems/nix-installer-action@main
       # - uses: DeterminateSystems/magic-nix-cache-action@main
-      # - run: nix flake check .
-      - run: echo hi
+      - run: nix flake check .
+      # - run: echo hi

configurations/nixos/forgejo-runner-tofu/default.nix

@@ -18,12 +18,20 @@ in
   ];
 
   nix.settings = {
-    allowed-users = [ "gitea-runner" ];
-    trusted-users = [ "gitea-runner" ];
+    allowed-users = [
+      "root"
+      "@wheel"
+      "@builders"
+      "gitea-runner"
+    ];
+    trusted-users = [
+      "root"
+      "gitea-runner"
+    ];
   };
   sops.secrets.forgejo-runners-token = {
-    # owner = "gitea-runner";
-    # group = "gitea-runner";
+    owner = "gitea-runner";
+    group = "gitea-runner";
     mode = "0777";
   };
   services.gitea-actions-runner = {

modules/flake/deploy.nix

@@ -53,7 +53,7 @@ in
     autoRollback = false;
     magicRollback = true;
     user = "root";
-    remoteBuild = true;
+    # remoteBuild = true;
     nodes = lib.mapAttrs genNode deployableNodes;
   };
 }

modules/nixos/common/default.nix

@@ -8,11 +8,15 @@
     ];
   zramSwap.enable = true;
   nixpkgs.hostPlatform = "x86_64-linux";
-  nixpkgs.overlays = [ flake.inputs.self.overlays.default ];
+  nixpkgs.overlays = [
+    flake.inputs.self.overlays.default
+    # flake.inputs.deploy-rs.overlays.default
+  ];
   services.tailscale = {
     enable = true;
   };
   environment.systemPackages = with pkgs; [
     git
+    deploy-rs
   ];
 }