From f0aa23631260d179539d20bfc7c60aeb40e7fd33 Mon Sep 17 00:00:00 2001
From: Kalle Struik <kalle@kallestruik.nl>
Date: Sun, 13 Apr 2025 22:30:03 +0200
Subject: [PATCH] Make docker binary available for the forgejo runner

---
 roles/forgejo-runner.nix | 30 ++++++++++++++++++++++++------
 1 file changed, 24 insertions(+), 6 deletions(-)

diff --git a/roles/forgejo-runner.nix b/roles/forgejo-runner.nix
index f2f2ffc..d6809fa 100644
--- a/roles/forgejo-runner.nix
+++ b/roles/forgejo-runner.nix
@@ -9,6 +9,7 @@
       pkgs,
       lib,
       config,
+      host,
       ...
     }:
     {
@@ -23,7 +24,9 @@
           cfg = config.forgejo-runner;
         in
         {
-          networking.firewall.allowedTCPPorts = [ 39175 ];
+          networking.firewall.allowedTCPPorts = [
+            39175 # Cache port
+          ];
 
           sops.secrets = {
             "forgejo_runner/token" = {
@@ -31,11 +34,11 @@
             };
           };
 
-          # environment.persistence."/persistent" = {
-          #   directories = [
-          #     "/var/lib/private/gitea-runner/runner"
-          #   ];
-          # };
+          environment.persistence."/persistent" = {
+            directories = [
+              "/var/lib/private/gitea-runner"
+            ];
+          };
 
           sops.templates."forgejo_runner_token.env" = {
             owner = "root";
@@ -44,6 +47,10 @@
             '';
           };
 
+          systemd.services.forgejo-secrets = {
+            after = [ "cephfs.mount" ];
+          };
+
           services.gitea-actions-runner = {
             package = pkgs.forgejo-actions-runner;
             instances.default = {
@@ -57,6 +64,17 @@
                 "ubuntu-20.04:docker://node:16-bullseye"
                 "ubuntu-18.04:docker://node:16-buster"
               ];
+              settings = {
+                cache = {
+                  enabled = true;
+                  host = host.ip;
+                  port = 39175;
+                };
+
+                container = {
+                  docker_host = "automount";
+                };
+              };
             };
           };
         };