From d86b7db36ea5966d6abd965795210d4fe962ede9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Sat, 6 Apr 2024 20:51:48 -0300
Subject: [PATCH] monolith: add forgejo runner

---
 flake.nix                                 |   1 +
 secrets/monolith-forgejo-runner-token.age | Bin 0 -> 682 bytes
 secrets/secrets.nix                       |   1 +
 system/monolith-forgejo-runner.nix        |  19 +++++++++++++++++++
 system/secrets.nix                        |   2 ++
 5 files changed, 23 insertions(+)
 create mode 100644 secrets/monolith-forgejo-runner-token.age
 create mode 100644 system/monolith-forgejo-runner.nix

diff --git a/flake.nix b/flake.nix
index 3bff3c6..f3a4532 100644
--- a/flake.nix
+++ b/flake.nix
@@ -123,6 +123,7 @@
           modules = [
             ./hosts/monolith.nix
             ./system/monolith-gitlab-runner.nix
+            ./system/monolith-forgejo-runner.nix
             ./system/nix-serve.nix
             ./system/steam.nix
           ] ++ common_modules;
diff --git a/secrets/monolith-forgejo-runner-token.age b/secrets/monolith-forgejo-runner-token.age
new file mode 100644
index 0000000000000000000000000000000000000000..aa3deb8968d525267e9c1267b5d556cc19a70f39
GIT binary patch
literal 682
zcmV~$JB*WH003ZPj05xK78CCV6Nje9<EIZ66Uw7JN+~~-(nbfMJPWiyfzs6*O&lB@
zZa8((RTC#ir<*h`CN6He8W$J8&knq<m$^l|+eh2%Vp{}gjU(Mh=Vcjoi_$(HHO)Z?
zkbqd^N8lLip=}IJCsUa@1nbyLjG?rZYixt<mX)lcT9tyCBGn!XqJoE}xFZ(cM(rVr
z-v+$F2z(^+ib)#uRBuQ5LE%$XSOlg<4osW#bu>6kQVv8zya)?^D~hUG_*t&vh-W!R
zv`3T)jbogzHtumTn0xhFO^CsPmZRASXQz23(*{Ef##AB*Ng<<b><(EeIT|a3$>`XV
z+7ffxd=>2N3E&OY#%hj|Ox{iUaspZ10yzZ)c6wl<x-VuFw8PM6XB4$kkWk@J)Mt<L
z&fXK2hmj|iRX|HBfKkqh&dky(Dukf{r3@e1B_t`&f%~E*f?-=JM2WzWJt0Bb$f6fR
zF68y2PkINziS=l&8I7By{e<3c+a{8!G1hmf4by>iL#CaQpunU?)`G%PU^m?a%N5C%
zECvftS(g~ibkJTbX<jkeCjuePc>zvGMXhV<*y)>59s10=$sJ_Lj~m^LG!83rG76mO
zWVLg4)|8NRgX#e{<@&PFQNttcaPGpY+768as8d86b08k02-59#&&L*SW4Yz|@(QiY
z6;?seSP=KwrAA7lU~AQjFsV9)LCldW;nwpp_;FKRzqoq)=hNTQ+rOwA<?FvM+i#!c
w2lpO3cl<Yzb@q-v@nhoq-QPt0ba9d1e|7Tg^8J&CKVP3+pIZFO4<9f815PIB0RR91

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 976cc88..90de405 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -5,6 +5,7 @@ in
   "rainbow-gitlab-runner-thoreb-itinerario-registrationConfigFile.age".publicKeys = [ main_ssh_public_key ];
   "monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.age".publicKeys = [ main_ssh_public_key ];
   "gitlab-runner-thoreb-telemetria-registrationConfigFile.age".publicKeys = [ main_ssh_public_key ];
+  "monolith-forgejo-runner-token.age".publicKeys = [ main_ssh_public_key ];
   "lelgenio-cachix.age".publicKeys = [ main_ssh_public_key ];
   "monolith-nix-serve-privkey.age".publicKeys = [ main_ssh_public_key ];
   "phantom-nextcloud.age".publicKeys = [ main_ssh_public_key ];
diff --git a/system/monolith-forgejo-runner.nix b/system/monolith-forgejo-runner.nix
new file mode 100644
index 0000000..2fa82b4
--- /dev/null
+++ b/system/monolith-forgejo-runner.nix
@@ -0,0 +1,19 @@
+{ pkgs, config, ... }: {
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.default = {
+      enable = true;
+      name = "monolith";
+      url = "https://git.lelgenio.xyz";
+      tokenFile = config.age.secrets.monolith-forgejo-runner-token.path;
+      labels = [
+        # provide a debian base with nodejs for actions
+        "debian-latest:docker://node:18-bullseye"
+        # fake the ubuntu name, because node provides no ubuntu builds
+        "ubuntu-latest:docker://node:18-bullseye"
+        # provide native execution on the host
+        #"native:host"
+      ];
+    };
+  };
+}
diff --git a/system/secrets.nix b/system/secrets.nix
index 22c5d14..c94581c 100644
--- a/system/secrets.nix
+++ b/system/secrets.nix
@@ -6,6 +6,8 @@
       ../secrets/monolith-gitlab-runner-thoreb-itinerario-registrationConfigFile.age;
     secrets.gitlab-runner-thoreb-telemetria-registrationConfigFile.file =
       ../secrets/gitlab-runner-thoreb-telemetria-registrationConfigFile.age;
+    secrets.monolith-forgejo-runner-token.file =
+      ../secrets/monolith-forgejo-runner-token.age;
     secrets.rainbow-gitlab-runner-thoreb-itinerario-registrationConfigFile.file =
       ../secrets/rainbow-gitlab-runner-thoreb-itinerario-registrationConfigFile.age;
     secrets.monolith-nix-serve-privkey.file =