Try Forgejo actions

.forgejo/workflows/demo.yml

@@ -0,0 +1,6 @@
+on: [push]
+jobs:
+  test:
+    runs-on: docker
+    steps:
+      - run: echo All Good

secrets/secrets.nix

@@ -10,5 +10,6 @@ let
 in
 {
   "forgejo-runner-token.age".publicKeys = [ tbarnouin forgejo ];
+  "../services/forgejo-runner/secrets/forgejo-runner-token.age".publicKeys = [ tbarnouin forgejo ];
 }
 

services/forgejo-runner/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, ... }:
+{ config, pkgs, lib, agenix, ... }:
 let
   cfg = config.services.vm_forgejo;
 in
@@ -7,12 +7,19 @@ in
     enable = lib.mkEnableOption "Enable Forgejo service";
   };
   config = lib.mkIf cfg.enable {
-    age.secrets.forgejo-runner-token.file = ./secrets/forgejo-runner-token.age;
+    users.users.gitea-runner = {
+      isNormalUser = true;
+    };
+    age.secrets.forgejo-runner-token = {
+      file  = ./secrets/forgejo-runner-token.age;
+      mode  = "0660";
+      owner = "root";
+    };
     services.gitea-actions-runner = {
       package = pkgs.forgejo-actions-runner;
       instances.default = {
         enable = true;
-        name = "monolith";
+        name = "nixos-runner";
         url = "https://git.le43.eu";
         tokenFile = config.age.secrets.forgejo-runner-token.path;
         labels = [