add label for new runner

.forgejo/workflows/ci.yaml

@@ -10,13 +10,13 @@ on:
 
 jobs:
   check-pre-commit:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix-build -A tests
 
   check-data-model:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix-shell --run 'nix-unit ./deployment/data-model-test.nix'
@@ -28,31 +28,31 @@ jobs:
       - run: nix build .#checks.x86_64-linux.test-mastodon-service -L
 
   check-peertube:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix build .#checks.x86_64-linux.test-peertube-service -L
 
   check-panel:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix-build -A tests.panel
 
   check-deployment-basic:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix build .#checks.x86_64-linux.deployment-basic -L
 
   check-deployment-cli:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix build .#checks.x86_64-linux.deployment-cli -L
 
   check-deployment-panel:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - uses: actions/checkout@v4
       - run: nix build .#checks.x86_64-linux.deployment-panel -L

.forgejo/workflows/update.yaml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   lockfile:
-    runs-on: icewind1991/nix-runner
+    runs-on: nix
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4

infra/forgejo-ci/forgejo-actions-runner.nix

@@ -0,0 +1,45 @@
+{ pkgs, config, ... }:
+
+{
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+
+    instances.default = {
+      enable = true;
+
+      name = config.networking.fqdn;
+      url = "https://git.fediversity.eu";
+      tokenFile = config.age.secrets.forgejo-runner-token.path;
+
+      settings = {
+        log.level = "info";
+        runner = {
+          file = ".runner";
+          capacity = 1;
+          timeout = "3h";
+          insecure = false;
+          fetch_timeout = "5s";
+          fetch_interval = "2s";
+        };
+      };
+
+      ## This runner supports Docker (with a default Ubuntu image) and native
+      ## modes. In native mode, it contains a few default packages.
+      labels = [
+        "docker:docker://node:16-bullseye"
+        "nix:docker:/icewind1991/nix-runner:latest"
+        "native:host"
+      ];
+
+      hostPackages = with pkgs; [
+        bash
+        git
+        nix
+        nodejs
+      ];
+    };
+  };
+
+  ## For the Docker mode of the runner.
+  virtualisation.docker.enable = true;
+}