plumjam/nixos - Change TF7L7GT4UDTRC4YFK4RBXRJYK5SNTPNGDFOPLLKLEDK27GA3GAEQC

hosts.{kiwi,plum}: Use `forgejo-runner` for CI runners.

Also added runner to trusted users although I'm not sure it's the best approach. I don't know if it even gives it the necessary access to things like trusted-public-keys despite what the warnings in CI show.

Created by PlumJam on November 11, 2025

TF7L7GT4UDTRC4YFK4RBXRJYK5SNTPNGDFOPLLKLEDK27GA3GAEQC

Dependencies

In channels

main

Change contents

File deletion: ba502d6a3f80c2bb9caf4bbdb1ba3645-forgejoRunnerToken.age
BF:BFD[3.5321] → [2.682:768]
BF:BFD[2.768] → [2.262:262]
B:BD[2.262] → [2.263:681]
File addition: b83fb8718779830c11912fb911b34b6f-forgejoRunnerToken.age (----------)
[3.5321]
Replacement in hosts/plum/git-runners/forgejo-runner-token.age at line 2 [2.1601]
B:BD[2.1624] → [2.1624:1942]
[2.1624]

Replacement in hosts/plum/git-runners/default.nix at line 17 [2.2000]

B:BD[2.2538] → [2.2538:3541]

  services.gitea-actions-runner.instances.${config.networking.hostName} = enabled {
    name         = config.networking.hostName;
    tokenFile    = config.age.secrets.forgejoRunnerToken.path;
    url          = "https://git.plumj.am";
    labels       = [ "self-hosted:host" ];
    hostPackages = [
      pkgs.bash
      pkgs.curl
      pkgs.git
      pkgs.nix
      pkgs.nodejs
      pkgs.xz
    ];
    settings = {
      runner = {
        file             = ".runner";
        timeout          = "3h";
        shutdown_timeout = "3h";
        fetch_timeout    = "10s";
        fetch_interval   = "2s";
        report_interval  = "1s";
      };
      cache = {
        enabled                    = true;
        port                       = 0;
        dir                        = "";
        external_server            = "";
        secret                     = "";
        host                       = "";
        proxy_port                 = 0;
        actions_cache_url_override = "";
      };

[2.2538]

[2.3541]

  services.gitea-actions-runner = {
    package = pkgs.forgejo-runner;
    instances.${config.networking.hostName} = enabled {
      name         = config.networking.hostName;
      tokenFile    = config.age.secrets.forgejoRunnerToken.path;
      url          = "https://git.plumj.am/";
      labels       = [ "self-hosted:host" ];
      hostPackages = [
        pkgs.bash
        pkgs.curl
        pkgs.git
        pkgs.nix
        pkgs.nodejs
        pkgs.xz
      ];

File deletion: 80f72fb6d2fc0e7bc64d960489fdc7e0-forgejoRunnerToken.age
BF:BFD[3.16983] → [2.4657:4743]
BF:BFD[2.4743] → [2.4294:4294]
B:BD[2.4294] → [2.4295:4656]
File addition: 0c2b20be9f23ba1faef0730eac2f839d-forgejoRunnerToken.age (----------)
[3.16983]
Replacement in hosts/kiwi/git-runners/forgejo-runner-token.age at line 2 [2.5148]
B:BD[2.5171] → [2.5171:5494]
[2.5171]
Replacement in hosts/kiwi/git-runners/default.nix at line 2 [2.5552]
B:BD[2.5585] → [2.5585:5619]
```
  inherit (lib) enabled disabled;
```
[2.5585]
[2.5619]
```
  inherit (lib) enabled;
```

Replacement in hosts/kiwi/git-runners/default.nix at line 17 [2.5552]

B:BD[2.6099] → [2.6099:7102]

  services.gitea-actions-runner.instances.${config.networking.hostName} = enabled {
    name         = config.networking.hostName;
    tokenFile    = config.age.secrets.forgejoRunnerToken.path;
    url          = "https://git.plumj.am";
    labels       = [ "self-hosted:host" ];
    hostPackages = [
      pkgs.bash
      pkgs.curl
      pkgs.git
      pkgs.nix
      pkgs.nodejs
      pkgs.xz
    ];
    settings = {
      runner = {
        file             = ".runner";
        timeout          = "3h";
        shutdown_timeout = "3h";
        fetch_timeout    = "10s";
        fetch_interval   = "2s";
        report_interval  = "1s";
      };
      cache = {
        enabled                    = true;
        port                       = 0;
        dir                        = "";
        external_server            = "";
        secret                     = "";
        host                       = "";
        proxy_port                 = 0;
        actions_cache_url_override = "";
      };

[2.6099]

[2.7102]

  services.gitea-actions-runner = {
    package = pkgs.forgejo-runner;
    instances.${config.networking.hostName} = enabled {
      name         = config.networking.hostName;
      tokenFile    = config.age.secrets.forgejoRunnerToken.path;
      url          = "https://git.plumj.am/";
      labels       = [ "self-hosted:host" ];
      hostPackages = [
        pkgs.bash
        pkgs.curl
        pkgs.git
        pkgs.nix
        pkgs.nodejs
        pkgs.xz
      ];

Replacement in flake.nix at line 34 [6.24075]

B:BD[4.249] → [5.35657:35717]

    trusted-users            = [ "root" "@wheel" "build" ];

[4.249]

[4.338]

    trusted-users            = [ "root" "@wheel" "build" "runner" ];

hosts.{kiwi,plum}: Use `forgejo-runner` for CI runners.

Dependencies

In channels

Change contents

File deletion: ba502d6a3f80c2bb9caf4bbdb1ba3645-forgejoRunnerToken.age

File addition: b83fb8718779830c11912fb911b34b6f-forgejoRunnerToken.age (----------)

Replacement in hosts/plum/git-runners/forgejo-runner-token.age at line 2 [2.1601]

Replacement in hosts/plum/git-runners/default.nix at line 17 [2.2000]

File deletion: 80f72fb6d2fc0e7bc64d960489fdc7e0-forgejoRunnerToken.age

File addition: 0c2b20be9f23ba1faef0730eac2f839d-forgejoRunnerToken.age (----------)

Replacement in hosts/kiwi/git-runners/forgejo-runner-token.age at line 2 [2.5148]

Replacement in hosts/kiwi/git-runners/default.nix at line 2 [2.5552]

Replacement in hosts/kiwi/git-runners/default.nix at line 17 [2.5552]

Replacement in flake.nix at line 34 [6.24075]