From f984d894fc233443b3d1f045999800d025847b14 Mon Sep 17 00:00:00 2001
From: hektor <hektor.misplon@pm.me>
Date: Tue, 28 Jul 2026 00:12:06 +0200
Subject: [PATCH] feat(hecuba): declare gitea actions runner

---
 flake.lock               | 12 ++++++------
 hosts/hecuba/default.nix | 22 ++++++++++++++++++++++
 2 files changed, 28 insertions(+), 6 deletions(-)

diff --git a/flake.lock b/flake.lock
index 3c4274d..cda75a4 100644
--- a/flake.lock
+++ b/flake.lock
@@ -427,10 +427,10 @@
         "url": "ssh://git@github.com/hektor/hecuba-services"
       },
       "original": {
-        "type": "git",
-        "url": "ssh://git@github.com/hektor/hecuba-services",
         "ref": "main",
-        "shallow": true
+        "shallow": true,
+        "type": "git",
+        "url": "ssh://git@github.com/hektor/hecuba-services"
       }
     },
     "home-manager": {
@@ -496,10 +496,10 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1783872092,
-        "narHash": "sha256-Lg4kvJw3BxjeBEszQ9n1H+Oj/30u3N9N+TAwbmKhDPY=",
+        "lastModified": 1785190089,
+        "narHash": "sha256-nhzJq5kkcU9X5QXhErn1pHqqN5TPxUVV0teOd+yMzN4=",
         "ref": "main",
-        "rev": "1900322e9ddd920986c5b31ef161fd1c3f977846",
+        "rev": "3375f7a8ccb4dc3c5ea3c488597c659665973e4d",
         "shallow": true,
         "type": "git",
         "url": "ssh://git@github.com/hektor/nix-secrets"
diff --git a/hosts/hecuba/default.nix b/hosts/hecuba/default.nix
index c11e204..4bdcd16 100644
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -28,6 +28,28 @@ in
   ssh.enable = true;
   tailscale.enable = true;
 
+  secrets.hecuba-gitea-runner = [ "registration_token" ];
+
+  sops.templates."gitea-runner.env".content = ''
+    TOKEN=${config.sops.placeholder."hecuba-gitea-runner/registration_token"}
+  '';
+
+  services.gitea-actions-runner.instances.hecuba = {
+    enable = true;
+    name = "hecuba";
+    url = "https://git.hektormisplon.xyz";
+    tokenFile = config.sops.templates."gitea-runner.env".path;
+    labels = [ "nix:host" ];
+    hostPackages = with pkgs; [
+      bash
+      coreutils
+      git
+      nix
+      nodejs
+      openssh
+    ];
+  };
+
   virtualisation.arion.backend = "docker";
 
   networking.hostName = config.host.name;