{ config, pkgs, ... }:
{
  environment.systemPackages = [ pkgs.forgejo-runner ];

  # https://wiki.nixos.org/wiki/Forgejo

  services.gitea-actions-runner = {
    package = pkgs.forgejo-runner;
    instances.default = {
      enable = true;
      name = "pc2";
      url = "https://forge.darkest.space";
      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
      # placed manually, not managed by Nix.
      # legacy "registration token", not the newer UUID+token flow
      tokenFile = "/etc/forgejo-runner/registration_token";
      # no docker:// image -> jobs run directly on the host, giving them
      # pc2's real Nix store/daemon (needed for `nix build` results to be
      # substitutable by other hosts via the existing distributed-builds mesh)
      labels = [ "nixos:host" ];
      hostPackages = with pkgs; [
        bash
        coreutils
        curl
        gawk
        gitMinimal
        gnused
        jq
        nodejs
        wget
        config.nix.package
      ];
    };
  };
}