Add Forgejo runner and check update action

modules/services/default.nix

@@ -4,6 +4,7 @@
     ./dashy.nix
     ./firefly-iii.nix
     ./forgejo.nix
+    ./forgejo-runner.nix
     ./immich.nix
     ./media-mgr.nix
     ./n8n.nix

modules/services/forgejo-runner.nix

@@ -0,0 +1,100 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  cfg = config.my.services.forgejo-runner;
+in
+{
+
+  options.my.services.forgejo-runner = {
+    enable = lib.mkEnableOption "Enable Forgejo Actions runner";
+
+    url = lib.mkOption {
+      type = lib.types.str;
+      description = "URL of the Forgejo instance";
+      example = "https://git.example.com";
+    };
+
+    tokenFile = lib.mkOption {
+      type = lib.types.path;
+      description = "Path to file containing the runner registration token";
+    };
+
+    name = lib.mkOption {
+      type = lib.types.str;
+      default = config.networking.hostName;
+      description = "Name of the runner";
+    };
+
+    labels = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = [
+        "nix:host"
+        "native:host"
+      ];
+      description = "Labels for the runner";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+
+    # Ensure Nix is available with flakes enabled (should already be the case)
+    nix.settings.experimental-features = [
+      "nix-command"
+      "flakes"
+    ];
+
+    # Install packages needed for CI jobs
+    environment.systemPackages = with pkgs; [
+      git
+      nix
+      colmena
+      jq
+      curl
+    ];
+
+    services.gitea-actions-runner = {
+      package = pkgs.forgejo-runner;
+      instances.default = {
+        enable = true;
+        name = cfg.name;
+        url = cfg.url;
+        tokenFile = cfg.tokenFile;
+        labels = cfg.labels;
+        settings = {
+          runner = {
+            # Capacity defines how many jobs can run concurrently
+            capacity = 1;
+            # Timeout for a job
+            timeout = "6h";
+          };
+          container = {
+            # Disable container mode - run directly on host
+            # This allows using nix commands directly
+            network = "";
+            privileged = false;
+            options = "";
+            workdir_parent = "";
+          };
+        };
+        hostPackages = with pkgs; [
+          bash
+          coreutils
+          curl
+          gawk
+          git
+          gnused
+          jq
+          nix
+          nodejs
+          wget
+        ];
+      };
+    };
+
+  };
+}
+

modules/services/forgejo.nix

@@ -86,6 +86,9 @@ in
             SSH_PORT = sshPort;
             HTTP_PORT = httpPort;
           };
+          actions = {
+            ENABLED = true;
+          };
         } cfg.settings;
       };