runner: add Forgejo Actions runner on the mediaserver

Adds services/forgejo-runner.nix as a host-gated module on the mediaserver
and switches the flake-update workflow from runs-on: ubuntu-latest to the
self-hosted fred-nix label, mapped to catthehacker/ubuntu:act-latest for
GitHub-action compatibility. Token lives at /var/secrets/forgejo-runner-token
so it stays out of the Nix store.

Also drops the stray result/ build symlink from the worktree.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-05-01 15:58:24 +01:00
parent af1f5c9a04
commit 29e1185694
3 changed files with 33 additions and 1 deletions

View file

@ -7,7 +7,7 @@ on:
jobs:
update:
runs-on: ubuntu-latest
runs-on: fred-nix
permissions:
contents: write