builder: configure gitea actions

systems/x86_64-linux/builder/default.nix

@@ -105,16 +105,16 @@
   };
 
   # Ollama used by open-webui as llm backend
-  services.ollama = {
-    enable = true;
-    # acceleration = "rocm";
-  };
-  services.open-webui = {
-    enable = true;
-    port = 8080;
-    openFirewall = true;
-    host = "builder.julian-mutter.de";
-  };
+  # services.ollama = {
+  #   enable = true;
+  #   # acceleration = "rocm";
+  # };
+  # services.open-webui = {
+  #   enable = true;
+  #   port = 8080;
+  #   openFirewall = true;
+  #   host = "builder.julian-mutter.de";
+  # };
 
   networking.firewall.allowedTCPPorts = [
     80
@@ -213,6 +213,22 @@
     };
   };
 
+  # =========== Gitea actions ==========
+  services.gitea-actions-runner.instances."builder" = {
+    enable = true;
+    url = "https://gitlab.julian-mutter.de";
+    name = "builder";
+    tokenFile = config.sops.secrets."gitea_token".path;
+    labels = [ ]; # use default labels
+  };
+
+  virtualisation.podman.enable = true;
+
+  sops.secrets."gitea_token" = {
+    owner = config.users.users.nix.name;
+    sopsFile = ../../../secrets/secrets-builder.yaml;
+  };
+
   # =========== Binary Cache ==========
   services.nix-serve = {
     enable = true;