From 0a3c6303789967d47ee6e4c437aacd6362ce1eec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jana=20D=C3=B6nszelmann?= <jana@donsz.nl>
Date: Wed, 20 Aug 2025 11:28:00 +0200
Subject: [PATCH] test workflow

---
 .github/workflows/deploy.yml |  6 ++++++
 fili/services/forgejo.nix    | 26 ++++++++++++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 .github/workflows/deploy.yml

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 0000000..efdc13f
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,6 @@
+on: [push]
+jobs:
+  test:
+    runs-on: docker
+    steps:
+      - run: echo All good!
diff --git a/fili/services/forgejo.nix b/fili/services/forgejo.nix
index 538cf8c..02c0f8e 100644
--- a/fili/services/forgejo.nix
+++ b/fili/services/forgejo.nix
@@ -73,4 +73,30 @@ in
     };
     mailerPasswordFile = config.sops.secrets.forgejo.path;
   };
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+
+    instances.fili = {
+      enable = true;
+      name = "forgejo-runner-01";
+      token = "SutcrCJ3ULoE5LBj9Tm8zkvTRDEJCpbvpe7FEJHC";
+      url = "https://code.forgejo.org/";
+      labels = [
+        "node-22:docker://node:22-bookworm"
+        "nixos-latest:docker://nixos/nix"
+      ];
+      settings = {};
+    };
+  };
+
+
+  virtualisation.docker = {
+    daemon.settings = {
+      fixed-cidr-v6 = "fd00::/80";
+      ipv6 = true;
+    };
+  };
+  networking.firewall.trustedInterfaces = [ "br-+" ];
+
 }