From 0629466bf26f8532264fdbb524ffd10b72cd98ea Mon Sep 17 00:00:00 2001
From: Joakim Repomaa <joakim@repomaa.com>
Date: Sun, 30 Mar 2025 20:06:22 +0300
Subject: [PATCH] add gitlab runner

---
 hosts/freun-dev/secrets.nix       |   2 ++
 hosts/freun-dev/services.nix      |  16 ++++++++++++++++
 secrets/gitlab-runner/default.age | Bin 0 -> 510 bytes
 secrets/gitlab-runner/docker.age  | Bin 0 -> 510 bytes
 secrets/secrets.nix               |   2 ++
 5 files changed, 20 insertions(+)
 create mode 100644 secrets/gitlab-runner/default.age
 create mode 100644 secrets/gitlab-runner/docker.age

diff --git a/hosts/freun-dev/secrets.nix b/hosts/freun-dev/secrets.nix
index 611e305..36233fc 100644
--- a/hosts/freun-dev/secrets.nix
+++ b/hosts/freun-dev/secrets.nix
@@ -19,6 +19,8 @@
           "dnote"
           "octodns"
           "mealie"
+          "gitlab-runner/default"
+          "gitlab-runner/docker"
         ]
     )
     // {
diff --git a/hosts/freun-dev/services.nix b/hosts/freun-dev/services.nix
index 4f4a8e0..05e15e0 100644
--- a/hosts/freun-dev/services.nix
+++ b/hosts/freun-dev/services.nix
@@ -230,5 +230,21 @@ in
         PORT = "3007";
       };
     };
+
+    gitlab-runner = {
+      enable = true;
+      services = {
+        default = {
+          dockerImage = "alpine";
+          authenticationTokenConfigFile = secrets."gitlab-runner/default".path;
+        };
+        docker = {
+          dockerImage = "docker:stable";
+          dockerVolumes = [ "/var/run/docker.sock:/var/run/docker.sock" ];
+          tagList = [ "docker" ];
+          authenticationTokenConfigFile = secrets."gitlab-runner/docker".path;
+        };
+      };
+    };
   };
 }
diff --git a/secrets/gitlab-runner/default.age b/secrets/gitlab-runner/default.age
new file mode 100644
index 0000000000000000000000000000000000000000..8eb450d76f3fe41144bd8f538425b668a69c7e19
GIT binary patch
literal 510
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCU7FZOqia#Zk2^(gRj
zEqArdHS!56GB7T8ue2zN%J#@DOf>fj^G~UCwlpx$b;$^GG~qId%nB_rEYHX@3eGYs
zvn(sK^au%yD#=JMbM%i0&33Xh%}=T*i8Kkwi$u50#Vs>GBT&J}I48)>*;U)JBrznY
zDzhTkD<IF;#nCf8DAmWr$<Z~;JI%r*EiKAB+mS2KE!3pQJH*`4tkPTCKQY_WDcB`9
ztkSa}tjepPD!5$RJEg)eJjl^6#1Y-LfDrSvv~&f>4A;Cw&-79Q=M=M?0=K{duN0r$
zh@1@9z_Os^pj7?zKqrF$e{;VSXHPDdu)Gpq5Az65bMNdFKabqpz-06EJX4>bLeG-I
zNaN&!D&thsP>)~(^K>p<U0nrjQ?nAc@WMcMqtHT^M0aETWWT~xOA9Br(#-5)3#Vdl
z^Mb7KJpU;7kYX;woOn&%^ra~~XN$I;JM%MO`CO%S&kcMkd$_6@Zx|F@(K57fxx(pY
zyjEX6=N;pUW7W;cTo=E-%Z<rQ-Lzw}-cQMk$K#`|9x@d0^Gdwf=jhL2wj^b~$gQ;;
aZ|dBh`z9^wo}jx>@%Tl{9Cr;h7YP6c=C3pW

literal 0
HcmV?d00001

diff --git a/secrets/gitlab-runner/docker.age b/secrets/gitlab-runner/docker.age
new file mode 100644
index 0000000000000000000000000000000000000000..d2d28309100e1381578bfaefc232c47584236b57
GIT binary patch
literal 510
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCU7FZOqia#S!)Hcl=L
z^9k`bPV_Vhj4W`=3$%1}cQr6BFvv^~bV>?wP7Qa=G;yzVx8O=MkMuEd_An_h(hf}Y
zbv80iO-=OnNij%rjMDe<bk8ld^bPYdOb!Ukw?Mbe#Vs>GBT%8xEv+myLOanvB`q%_
zG|a-JA|)s+te`B&)veScJImiRr_|TfrOec$!h$P3z`H6V#mL)CJH^?<#HiHO*vPV?
zDl)~u*DWv9!^=Iw$I#NpFxSYaG!osmfDrSvv~&fN5*J4|Z!^a<e_#C~@AA@MQ(y03
zi<ESu!l;6PY}eA1iuCNPe2?VH>~yYz@WhZLmw;fO^x_gj?;yYOBD0_ZGt<&g*N7@}
ziyXuJj7ayqz>2`|s%$P@U0sEokdzYbvP#Q<z{09TBgfPz10Pcl19wliB+Cr*2#fMm
zi^zQEs`Qjdvt%xgz@>NJe?8;!yJQXj<EK}5AAF^~aO>eeawjhCS}<?3`k_}1?e8<K
zs~zri^D%NnyuH&Wy;F(d@3o9O(k4FZ*K=HHoYS&$y-0y$PI|4F&u;w!zemqH-M_SS
cM|mAvb3fbQ=aOk>UPaH=QocAfpD}Dd0Ox7Axc~qF

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index ef4fcbb..683084f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -29,4 +29,6 @@ in
   "octodns.age".publicKeys = users ++ [ freun-dev ];
   "mealie.age".publicKeys = users ++ [ freun-dev ];
   "borgbackup-radish.age".publicKeys = users ++ [ radish ];
+  "gitlab-runner/default.age".publicKeys = users ++ [ freun-dev ];
+  "gitlab-runner/docker.age".publicKeys = users ++ [ freun-dev ];
 }