{
  services.forgejo-runner = {
    hosts = [
      "ude"
      "youko"
    ];
    config =
      { config, pkgs, ... }:
      {
        age.secrets.forgejo-runner-token = {
          file = ../secrets/forgejo-token.age;
          owner = config.services.gitea-actions-runner.user;
        };

        services.gitea-actions-runner = {
          package = pkgs.forgejo-actions-runner;
          instances.default = {
            enable = true;
            name = config.networking.hostName;
            url = "https://git.rab.lol";
            tokenFile = config.age.secrets.forgejo-runner-token.path;
            labels = [
              "ubuntu-latest:docker://node:16-bullseye"
              "ubuntu-22.04:docker://node:16-bullseye"
              "ubuntu-20.04:docker://node:16-bullseye"
              "ubuntu-18.04:docker://node:16-buster"
              "native:host"
            ];
          };
        };
      };
  };
}