From c342230f41758cf42aa0fb001820d8bb608855c4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Charlotte=20=F0=9F=A6=9D=20Delenk?= <lotte@chir.rs>
Date: Sun, 13 Oct 2024 10:48:08 +0200
Subject: [PATCH] add a forgejo runner for darkkirb

---
 config/services/forgejo-runner.nix | 14 ++++++++++++++
 secrets/nas.yaml                   |  7 ++++---
 secrets/rainbow-resort.yaml        |  7 ++++---
 3 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/config/services/forgejo-runner.nix b/config/services/forgejo-runner.nix
index 3d0b8e46..61d0fec1 100644
--- a/config/services/forgejo-runner.nix
+++ b/config/services/forgejo-runner.nix
@@ -13,6 +13,20 @@
       tokenFile = config.sops.secrets."services/forgejo-runner".path;
       labels = [];
     };
+    instances.darkkirb = {
+      enable = true;
+      name = config.networking.hostName;
+      url = "https://git.chir.rs";
+      # Obtaining the path to the runner token file may differ
+      tokenFile = config.sops.secrets."services/forgejo-runner-darkkirb".path;
+      labels = [
+        "ubuntu-latest:docker://node:16-bullseye"
+        "ubuntu-22.04:docker://node:16-bullseye"
+        "ubuntu-20.04:docker://node:16-bullseye"
+        "ubuntu-18.04:docker://node:16-buster"
+      ];
+    };
   };
   sops.secrets."services/forgejo-runner" = {};
+  sops.secrets."services/forgejo-runner-darkkirb" = {};
 }
diff --git a/secrets/nas.yaml b/secrets/nas.yaml
index a2e8e4b3..8609dbbc 100644
--- a/secrets/nas.yaml
+++ b/secrets/nas.yaml
@@ -20,6 +20,7 @@ services:
         aws_credentials: ENC[AES256_GCM,data:Jqlm/51nraW5Z8Tz1wYKghcPqTFZtSHb5bC2/EKjYjQfcd504AHFNlAQjlsa0vdf5hyca9401PpeWuxxPb2jnKdRqYSh/JXqNKIXNDySJIdHbEwdBSW6Y9thzBldUfkpVIOAJgjGJmA69XIYCNaq75UJ3rE=,iv:GWx0SNEXr8JYttiWuzu0LK2V0cr0+mk7DTty2llEgyE=,tag:IsB+Y6ErXmmzR80z/L3C7g==,type:str]
     akkoma-key: ENC[AES256_GCM,data:0lPd+1JnjQpiDiyhOwNzCVrwA7PbQc7sK/INLOy1QiVbWmJ7C5ziwxU3AA==,iv:SZaD9QHxR6+NFiFYeC0H985/GlEEJ+QKocpo7FFg7Ls=,tag:jEGg4N42MJ/qPoIkN3q5cQ==,type:str]
     forgejo-runner: ENC[AES256_GCM,data:rKQkDgejZxCt2k685P4+393mtRXL7oCSENnH0c7Tr2X+cUmmoR6QikDkoBsefA==,iv:D2K12VA+BUSDo8LiHYoVzZQpveEcUCGe9BUwWqeHJt8=,tag:2JVcklZTplALwjaImydsHg==,type:str]
+    forgejo-runner-darkkirb: ENC[AES256_GCM,data:eCNO+wj58LfSJ5tetTe/9LwA6gYIigSIrcbwkcrNqUmI6heSR5VioI0hAAiEdw==,iv:OKsEWxiBUv4hy+2+QerHrP+hPWm0SWOh+C/XnVmpgjc=,tag:1pdor89ss3DyisnQIaX+HA==,type:str]
     renovate: ENC[AES256_GCM,data:pfbOrawWZFXj9VTqnSMoEe2MHo0wceCM39hsxQRXzLHj9+kpUlh7pQ==,iv:B03BU1MbI2mtprLs4MuVNF25EV3KF/Kip2Fdz0ff2r8=,tag:sXWgoNM1doXDOqAkQsKeGQ==,type:str]
 security:
     acme:
@@ -62,8 +63,8 @@ sops:
             Kytvc1lyRHRrRXRjaEV0V3ZDcUgzVVkKkqr0FcWUCkTYLIXJKuY5/LJX1odVaF4s
             P2BLyjXj81078QjKwTyXskFV36uWM70LoVfkxBRTMZO/4O+BCwRpkg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-25T14:49:57Z"
-    mac: ENC[AES256_GCM,data:b8rieCJjA0AJEBDd4HfWx2D3YYbRoEwkmQEkoafH4iypI+DvXD4DOPAJW4txb+Nn8kW1/jZ+OXGsqHXKIzqhijXeE1LtrCrCS4miITY58iNMbQAiYIHrJDA3HGlw7PsV4iIZFmeOMiZbFZqB7CszzMaqW2htr/rkact3iWEfrnc=,iv:F3d8sre7TXc8ZSUtUF1Fh5nCj1/CApki2eM4Y5hA2+o=,tag:JObKY52wPhzbKgf8fq1NFw==,type:str]
+    lastmodified: "2024-10-13T08:47:14Z"
+    mac: ENC[AES256_GCM,data:/X4p05MVx5tPBfvxJrf3vBid97I7e89Gqi0zX+FRvv0gMnHAt6ukBKoJIDr6bqCmH///ngwnt2kat0uGbwnjrq37q5vkLJYJwmGCII4HgMsUh97/ohMqooCDV0clwY+7qwyExNc+c5u6EwcxDjnkuEreCITripT6joYrkxBSwqE=,iv:yg5aZAlQWq2fuYhuDSyzX9BakK9h26h5stKzrc+ymSo=,tag:R5nY+cKHjPnATRsxgcZRyQ==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.9.0
+    version: 3.9.1
diff --git a/secrets/rainbow-resort.yaml b/secrets/rainbow-resort.yaml
index 86cf9db0..0b902da9 100644
--- a/secrets/rainbow-resort.yaml
+++ b/secrets/rainbow-resort.yaml
@@ -6,6 +6,7 @@ password:
     darkkirb: ENC[AES256_GCM,data:d82Q/Ew17WJK/qafVt8R1517ECOuGf1XaVzH7IqmyivZSVyXSTi2Wr43kV0P66FaponFN/ZvUL8YsghiepKxNVen/vqqJuI2R7aYApHH3RkbawCVperoj4rQlPeiHThuQEXTQDUX9W0ZlA==,iv:XuRk2NPyBEMZ9vaudLI6kQum0GM2PkVjWWovoabAnaw=,tag:F5iM9TeqV8/qlyMTkeJgfQ==,type:str]
 services:
     forgejo-runner: ENC[AES256_GCM,data:8g0kIbBbK559/O21ydk0MlM2M0OND4Ldr1ofw6z3A32CcVJQlmDASwA/00gNLw==,iv:gfrgMh7F6B3m6gRgPsm2XKeugDC4r7DcygUVgAL25oE=,tag:tAb8C5lbt3HyIhhOhwzNIA==,type:str]
+    forgejo-runner-darkkirb: ENC[AES256_GCM,data:tp8MRgmMuiIRzw9D+Am/fBR/fujqpIZztI9hzWBBrOUqmBh1yk8ALUaaWX1Ebg==,iv:z6V0fdt6X2nKF8CCKTuoKW/AfXAHDL9K0kJq/P+2HM0=,tag:sy5Zxpwdksv+EAw4QRVRNQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -30,8 +31,8 @@ sops:
             L1VEMnRsUmI5WGF6Vi9pZk42TmoyZlkKbG8GdQ0Dj5QWxw4qseVIa3vvFnnpH3tz
             T/F3/KnytQIApgAO07I/9wpHXE8IvrFjv/v37zmcNit5JHBYxtGlkQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-09-04T16:46:33Z"
-    mac: ENC[AES256_GCM,data:J/8obfGgT6Jqm0paoI4M/0kgS/WnI+7XC1f49+n/x8jwQyBn2jMtOWVAAgbarIOp44lQc+ZctORjY1QirRBAtGbRmWVFHDEJJPSX4KHfIsol+d62En4s+Nk0GK74p7ZQ0HJdx3CicHQexE5UXS35Uc3XvY471v+iIwaYahZPnUE=,iv:AW5qtr2wqvwqBGZ+2cGC5RZoEN2v/k+9xiBbgdBoMx0=,tag:tFWJ6s+tsJpqRazjNk0nKg==,type:str]
+    lastmodified: "2024-10-13T08:47:20Z"
+    mac: ENC[AES256_GCM,data:6W8qt+aWcmQTCy9Vvy+0qjO2ylg8Yal8SunvYJ4nl09kXnEhR5rd49cTSLgY6QnD7LPrkIO1Qew0LLP3PY+4d7xyMV1RIZxN6lAlmVOZJpJMFC7AGKV/6zOYNkg2O0ETgeKo443ZDoBsgJaYkMu099PlSX1tyP8N9yhirQzw8ok=,iv:VuoCV3YEVrZdblqD/Qa9R3RgRvpFzxZmvF68MpiSJ+s=,tag:vcBh79ntKC6wR+z4VonLaw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.9.0
+    version: 3.9.1