From 5cc6b40a3e97e6164008d0fd62343069d139757b Mon Sep 17 00:00:00 2001
From: Raphael <rparodi@student.42.fr>
Date: Fri, 6 Mar 2026 12:26:12 +0100
Subject: [PATCH] feat(services/selfhost): adding the git actions on forgejo

---
 hosts/server/secrets.nix         |   7 +++++++
 secrets/forgejo-runner-token.age | Bin 0 -> 369 bytes
 services/self_host/git.nix       |  14 +++++++++++++-
 3 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 secrets/forgejo-runner-token.age

diff --git a/hosts/server/secrets.nix b/hosts/server/secrets.nix
index 698cc70..9f439c6 100644
--- a/hosts/server/secrets.nix
+++ b/hosts/server/secrets.nix
@@ -60,6 +60,13 @@
     mode = "0440";
   };
 
+  age.secrets."forgejo-runner-token" = {
+    file = ../../secrets/forgejo-runner-token.age;
+    owner = "forgejo";
+    group = "forgejo";
+    mode = "0440";
+  };
+
   age.secrets."nextcloud-database" = {
     file = ../../secrets/nextcloud-database.age;
     owner = "nextcloud";
diff --git a/secrets/forgejo-runner-token.age b/secrets/forgejo-runner-token.age
new file mode 100644
index 0000000000000000000000000000000000000000..47e7e7f8147c505e5c85b56dc2513fc4a5ceb442
GIT binary patch
literal 369
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUltkgEhELU)HD$p+U
zO7bfT@C~=Lh{|v(k8srY@+r1VH!%z-NXvKkF*37EPfhVRO6D>Mb@VhgDE3S94R%XU
zEObf<cg(Vg$S`nD@(9&7H#IMDOb-lmN=f(dPe->cKe;f|Cs4sW(5J8}D#X&?GB`@x
z-#t^?EU2o=#5<xi#XUUS$=ujCu(CMJC9BjW+mS2HETAIOJTNe%*w-vGH{Uh6)G0kM
zqBNi+zdSuC$0Nls#m_h*ILRrvFr7<RS63muywbS9yUZudu_QOwIos3M&9gw?KRYDf
z$<W`z!@#{DDx)&hs4z6h)0Jy}Cf|2nC+}SeCPq7dPe@Nw70S32_)ATB+xLsTDRz1j
zLKDpk;y%vlx$pPLuH^Nfir6nxI||-RVbGnWo~0&v+H*miVbz1D0oxzBf15RJbqW9)
C5Q9Ph

literal 0
HcmV?d00001

diff --git a/services/self_host/git.nix b/services/self_host/git.nix
index ebeae81..12def2a 100644
--- a/services/self_host/git.nix
+++ b/services/self_host/git.nix
@@ -35,6 +35,7 @@ in
           AUTH_URL = "https://git.enium.eu/ui/oauth2";
           TOKEN_URL = "https://git.enium.eu/oauth2/token";
           API_URL = "https://git.enium.eu/oauth2/openid/forgejo/userinfo";
+          REDIRECT_URI = "https://git.enium.eu/user/oauth2/Enium/callback";
           CODE_CHALLENGE_METHOD = "S256";
           ENABLE_AUTO_REGISTRATION = true;
           UPDATE_AVATAR = true;
@@ -51,7 +52,18 @@ in
         };
       };
     };
-
+    gitea-actions-runner = {
+      package = pkgs.forgejo-runner;
+      instances.default = {
+        enable = true;
+        name = "monolith";
+        url = "https://git.enium.eu";
+        tokenFile = config.age.secrets.forgejo-runner-token.path;
+        labels = [
+          "ubuntu-latest:docker://node:16-bullseye"
+        ];
+      };
+    };
     nginx.virtualHosts."${gitDomain}" = {
       enableACME = true;
       forceSSL = true;