init: create forgejo-runner

.forgejo/workflows/push.yaml

@@ -3,6 +3,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: DeterminateSystems/nix-installer-action@main
+      # - uses: DeterminateSystems/nix-installer-action@main
-      - uses: DeterminateSystems/magic-nix-cache-action@main
+      # - uses: DeterminateSystems/magic-nix-cache-action@main
-      - run: nix flake check .
+      # - run: nix flake check .
+      - run: echo hi

configurations/nixos/base/default.nix

@@ -12,7 +12,7 @@ in
 {
   imports = [
     self.nixosModules.default
-    "${modulesPath}/virtualisation/lxc-container.nix"
+    # "${modulesPath}/virtualisation/lxc-container.nix"
   ];
   deploy = {
     enable = false;
@@ -22,7 +22,7 @@ in
   };
   networking = {
 
-    hostName = "tofu";
+    hostName = "base";
   };
   environment.systemPackages = [
   ];

configurations/nixos/forgejo-runner/default.nix

@@ -0,0 +1,56 @@
+{
+  flake,
+  modulesPath,
+  config,
+  pkgs,
+  ...
+}:
+
+let
+  inherit (flake) inputs;
+  inherit (inputs) self;
+in
+{
+  imports = [
+    self.nixosModules.default
+    "${modulesPath}/virtualisation/lxc-container.nix"
+  ];
+
+  nix.settings = {
+    allowed-users = [ "gitea-runner" ];
+    trusted-users = [ "gitea-runner" ];
+  };
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances = {
+      native = {
+        enable = true;
+        url = "https://git.skdevstuios.com";
+        name = "nix";
+        labels = [ "native:host" ];
+        tokenFile = config.sops.secrets.forgejo-runners-token.path;
+        hostPackages = with pkgs; [
+          nix
+          nodejs
+          git
+          bash
+          coreutils
+          curl
+        ];
+      };
+    };
+  };
+  deploy = {
+    enable = false;
+  };
+  services = {
+    tty-ips.enable = true;
+  };
+  networking = {
+    hostName = "base";
+  };
+  environment.systemPackages = [
+  ];
+  system.stateVersion = "25.05";
+}