From 9097d40703aa42dafa3e41672a9b40305d2b54f5 Mon Sep 17 00:00:00 2001
From: Daniel Patterson <me@danielpatterson.dev>
Date: Wed, 13 Sep 2023 00:25:15 +0100
Subject: [PATCH] Add gitea actions runner

---
 modules/gitea/default.nix              |  24 +++++++++++++++++++++++-
 secrets/gitea_actions_runner_token.age | Bin 0 -> 926 bytes
 secrets/secrets.nix                    |   1 +
 3 files changed, 24 insertions(+), 1 deletion(-)
 create mode 100644 secrets/gitea_actions_runner_token.age

diff --git a/modules/gitea/default.nix b/modules/gitea/default.nix
index 4154e31..ba084ea 100644
--- a/modules/gitea/default.nix
+++ b/modules/gitea/default.nix
@@ -8,6 +8,25 @@
       file = ../../secrets/sendmail_email_key_gitea.age;
       owner = "gitea";
       group = "gitea";
+    };
+
+	gitea_actions_runner_token = {
+	  file = ../../secrets/gitea_actions_runner_token.age;
+	};
+  };
+
+  services.gitea-actions-runner = {
+    instances = {
+      primary = {
+        enable = true;
+        name = "actions-runner";
+        url = config.services.gitea.settings.server.ROOT_URL;
+		tokenFile = config.age.secrets.gitea_actions_runner_token.path;
+		labels = [
+		  "native:host"
+		  "ubuntu-latest:docker://node:16-bullseye"
+		];
+      };
     };
   };
 
@@ -40,12 +59,15 @@
       mailer = {
         ENABLED = true;
         FROM = "gitea@broccoli.town";
-        MAILER_TYPE = "smtp";
+        PROTOCOL = "smtp";
         SMTP_ADDR = "smtp.sendgrid.net";
         SMTP_PORT = 465;
         IS_TLS_ENABLED = true;
         USER = "apikey";
       };
+	  actions = {
+		ENABLED = true;
+	  };
     };
     mailerPasswordFile = config.age.secrets.sendmail_email_key_gitea.path;
   };
diff --git a/secrets/gitea_actions_runner_token.age b/secrets/gitea_actions_runner_token.age
new file mode 100644
index 0000000000000000000000000000000000000000..442a22c826e12e3f17ac2f6b2b348aa076c54142
GIT binary patch
literal 926
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSnjf^Za3{-G)_Q`a1
zGjnutPR}$7aS6}Qugocp3NiDG%J3-23vxG!@+c1pF-p@9apZDw3eJoQbN6&N3@Zt@
z2u;rL^h-{6N%IQG2=NTak1$OR^NtA3$}%ksFGjb`sle1T(NUo)$19>dJxM<!C9TxZ
zEzj7iG}O|gurR`>)Hf$NAU9h(E!`!<)7jYF$%L!W#NQ{}$TYmTsxr&P(XqlwzaT3w
zw8YdbvPe5W#W38_ASgRCz{4{%%@f_W5Pg?|bVr3WBcHND!}2Q2LJQ|C|7=g698)L9
z)UrY+H_MdB5dU1af+Q24lDrIG4->A!3TM;&(u(8~qnr|_f~cT0<G@gFqfq_u#K6#s
z5Ytj)H(!_36pL&}FIRNi3VqXq+|m_{OAOKiqFl6d^8<>twcRSbo&0h<JiNSJ1M><D
z%$>blbMy-WbNxKcLJYW)BE2F4{Yt_uGKvecv>o%DEmO1dOpQy*{C&#Oecdv$`~m~~
zDgzVqgM86#OYx10@GDpF42g`$3^Xn^3Ggv6F)nho@T`oA3h+)2x6CvP$n&l=H83sC
zPYh2kF|y#Q2=vblNHPqw2o7@3OSaVZ&##OO3Gz1$3@i`Qt}x8C2u!Q+F3dIaN;E*X
z&D_AR#3)d~Ak8tO%F!=7Fg>I)E5f-n*)g-Yz$MSjqA<J2MBg;SB(*FzJ1{RND>#%Z
z-@V+#I4dfw$h088#L_d_JiMYHvB=yoBFZSg+{oO>)4#GPyTCQe#V8$Qn`(@!nQnSf
zYGQG!LU5&me@2EvU7n$8DOadPUPO_Hfq{voU!tRbd6`#sP-bbOkxNR6iGN{eg?FBJ
zK#FU5nSW54pSNLRMp03AhC#4TM5eyKbD6u7iwl>Tn|7wZalUa>j*m-5R#a$4dWLCm
zP%@XUuC9Wwo1d}1t9zN7Z>3p9NqIzBmS0(AKt__gTa=+$o{yPxx>1s|QE66kc_bHu
z%4d`K+OqG7f4D*#R|d^pwj;|-_|m5{wplya_8D9)&TcMBx_@<#Uu4<7c^55f=6Y0=
ig&vvk=&6cQ_K%WpoSWx7$^Sanb)UKLk#wupwp;+uXf;6q

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 867e3a9..d6cc1c6 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -27,4 +27,5 @@ in {
   "bigding_backup_s3_creds.age".publicKeys = users ++ [system4];
   "bigding_backup_repo_password.age".publicKeys = users ++ [system4];
   "sendmail_email_key_gitea.age".publicKeys = users ++ [system4];
+  "gitea_actions_runner_token.age".publicKeys = users ++ [system4];
 }