{pkgs, config,...}:
{

  age.secrets.forgejo-runner-token-1 = {
    file = ../../../../secrets/services/forgejo/forgejo-runner-token-1.age;
    owner = "gitea-runner";
  };
  
  virtualisation.docker.enable = true;
  
  services.gitea-actions-runner = {
    package = pkgs.forgejo-runner;
    instances.default = {
      enable = true;
      name = "runner-1";
      url = "https://git.v2.${config.networking.domain}";

      tokenFile = config.age.secrets.forgejo-runner-token-1.path;      

      labels = [
        "nixos-latest:docker://nixos/nix:latest"
        "native:host"
      ];
    };
  };
}