Configure nixedo as a Forgejo Actions Runner

hosts/nixedo/services/default.nix

@@ -1,3 +1,10 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}:
+
 {
   imports = [
     ./homepage
@@ -9,4 +16,32 @@
   services = {
     tailscale.enable = true;
   };
+
+  services.gitea-actions-runner.instances.default = {
+    enable = true;
+
+    hostPackages = with pkgs; [
+      bash
+      coreutils
+      curl
+      gawk
+      gitMinimal
+      gnused
+      nix
+      nodejs
+      wget
+    ];
+
+    labels = [
+      "nixos:host"
+    ];
+
+    name = config.networking.hostName;
+    tokenFile = config.age.secrets.forgejo-runner-token.path;
+    url = config.services.forgejo.settings.server.ROOT_URL;
+  };
+
+  age.secrets = {
+    forgejo-runner-token.file = "${inputs.self}/secrets/forgejo-runner-token.age";
+  };
 }