hosts/ude: add github-runner module

hosts/ude/default.nix

@@ -8,6 +8,7 @@
     imports = [
       "${modulesPath}/profiles/qemu-guest.nix"
       ./disks.nix
+      ./github-runner.nix
     ];
 
     nixpkgs.hostPlatform = "aarch64-linux";

hosts/ude/github-runner.nix

@@ -0,0 +1,27 @@
+{config, ...}: let
+  github-runner-user = "github-runner";
+in {
+  age.secrets.github-token = {
+    file = ../../secrets/github-token.age;
+    owner = github-runner-user;
+  };
+
+  services.github-runners.settei = {
+    enable = true;
+    tokenFile = config.age.secrets.github-token.path;
+    url = "https://github.com/nrabulinski/settei";
+    ephemeral = true;
+    user = github-runner-user;
+    serviceOverrides = {
+      DynamicUser = false;
+    };
+  };
+
+  users = {
+    users.${github-runner-user} = {
+      isSystemUser = true;
+      group = github-runner-user;
+    };
+    groups.${github-runner-user} = {};
+  };
+}