.forgejo/workflows/build.yaml

@@ -1,8 +0,0 @@
-on: [push]
-
-jobs:
-  check:
-    runs-on: native
-    steps:
-      - uses: actions/checkout@v4
-      - run: nix flake check

secrets/forgejo-token.age

@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 rA7dkQ tnp92QTb/uXAEizZuUrnaGcJCCkCSjIcE4RiQiYVdw8
-HXsRlqJSrDYaAeYslcR+g5KIQC1SUxFp+QdSHpKT61s
--> ssh-ed25519 IFuY+w LI7kx/XwfF0JU8tSmW75nxpeLTUkEfY8NunAZljafCc
-f+WEjASZzP9ISv+7kPIMVNgEjdHUxVnLzUkqFHo4byY
--> ssh-ed25519 GKhvwg EZDwzHfhaY0iHHeIDvm6BIY64kPPUgKjZnNuuwwqoAw
-FvZEeIqnsFA1fQka4R7sax1O13UZWoVbksSMLP3eEaA
---- XBBcs7w5J7w01fKGoAXVTgOffS9ajheUMz3vDsxHgTo
-¼›g´ÕöؤƒRn´lè¥gÃ’ÅÁA˜*%ÇYªr¯í
9}³=L~f7„¶ZgâxŠèœ
>¦ Rë}hQ›óõz`rÅZèØñ

secrets/secrets.nix

@@ -92,9 +92,4 @@ in
     keys.system.youko
     keys.other.bootstrap
   ];
-  "forgejo-token.age".publicKeys = [
-    keys.system.youko
-    keys.system.ude
-    keys.other.bootstrap
-  ];
 }

services/default.nix

@@ -1,6 +1,5 @@
 {
   imports = [
     ./attic.nix
-    ./forgejo-runner.nix
   ];
 }

services/forgejo-runner.nix

@@ -1,41 +0,0 @@
-{
-  services.forgejo-runner = {
-    hosts = [
-      "ude"
-      "youko"
-    ];
-    config =
-      { config, pkgs, ... }:
-      {
-        age.secrets.forgejo-runner-token.file = ../secrets/forgejo-token.age;
-
-        services.gitea-actions-runner = {
-          package = pkgs.forgejo-actions-runner;
-          instances.default = {
-            enable = true;
-            name = config.networking.hostName;
-            url = "https://git.rab.lol";
-            tokenFile = config.age.secrets.forgejo-runner-token.path;
-            settings = {
-              container.network = "bridge";
-            };
-            labels = [
-              "ubuntu-latest:docker://node:16-bullseye"
-              "ubuntu-22.04:docker://node:16-bullseye"
-              "ubuntu-20.04:docker://node:16-bullseye"
-              "ubuntu-18.04:docker://node:16-buster"
-              "native:host"
-              "native-${pkgs.system}:host"
-            ];
-          };
-        };
-
-        virtualisation.podman = {
-          enable = true;
-          defaultNetwork.settings.dns_enabled = true;
-        };
-
-        networking.firewall.trustedInterfaces = [ "podman+" ];
-      };
-  };
-}