{ config, pkgs, ... }:

{
  services.gitea-actions-runner = {
    package = pkgs.forgejo-runner;
    instances.snowden = {
      enable = true;
      name = "snowden";
      url = "https://git.berlin.ccc.de";
      labels = [
        "debian-stable:docker://docker.io/debian:stable-slim"
        "alpine-latest:docker://docker.io/alpine:latest"
        "buildkit:docker://docker.io/moby/buildkit:rootless"
      ];
      tokenFile = config.age.secrets.forgejo-runner-token-env.path;
      settings = {
        runner.labels = {
          debian-stable = {
            backend = "docker";
            backend-options = {
              image = "docker.io/debian:stable-slim";
              platform = "linux/amd64";
            };
          };
          alpine-latest = {
            backend = "docker";
            backend-options = {
              image = "docker.io/alpine:latest";
              platform = "linux/amd64";
            };
          };
          buildkit = {
            backend = "docker";
            backend-options = {
              image = "docker.io/moby/buildkit:rootless";
              platform = "linux/amd64";
            };
          };
        };
        server.connections.forgejo = {
          url = "https://git.berlin.ccc.de/";
          uuid = "7fd3683e-1bc1-429f-8467-e6d27044eb91";
          token_url = "file://${config.age.secrets.forgejo-runner-token.path}";
        };
        container = {
          enable_ipv6 = true;
          docker_host = "unix:///run/podman/podman.sock";
        };
      };
    };
  };
}