add ci

nixosConfigurations/muede-pc2/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./hardware.nix
+    ./gitea-runner.nix
     # ./vscode-server.nix
     # ./hass.nix
   ];

nixosConfigurations/muede-pc2/gitea-runner.nix

@@ -0,0 +1,34 @@
+{ config, pkgs, ... }:
+{
+  environment.systemPackages = [ pkgs.forgejo-runner ];
+
+  # https://wiki.nixos.org/wiki/Forgejo
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances.default = {
+      enable = true;
+      name = "pc2";
+      url = "https://forge.darkest.space";
+      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
+      # placed manually, not managed by Nix
+      tokenFile = "/etc/forgejo-runner/registration_token";
+      # no docker:// image -> jobs run directly on the host, giving them
+      # pc2's real Nix store/daemon (needed for `nix build` results to be
+      # substitutable by other hosts via the existing distributed-builds mesh)
+      labels = [ "nixos:host" ];
+      hostPackages = with pkgs; [
+        bash
+        coreutils
+        curl
+        gawk
+        gitMinimal
+        gnused
+        jq
+        nodejs
+        wget
+        config.nix.package
+      ];
+    };
+  };
+}