add gitlab runner

hosts/freun-dev/secrets.nix

@@ -19,6 +19,8 @@
           "dnote"
           "octodns"
           "mealie"
+          "gitlab-runner/default"
+          "gitlab-runner/docker"
         ]
     )
     // {

hosts/freun-dev/services.nix

@@ -230,5 +230,21 @@ in
         PORT = "3007";
       };
     };
+
+    gitlab-runner = {
+      enable = true;
+      services = {
+        default = {
+          dockerImage = "alpine";
+          authenticationTokenConfigFile = secrets."gitlab-runner/default".path;
+        };
+        docker = {
+          dockerImage = "docker:stable";
+          dockerVolumes = [ "/var/run/docker.sock:/var/run/docker.sock" ];
+          tagList = [ "docker" ];
+          authenticationTokenConfigFile = secrets."gitlab-runner/docker".path;
+        };
+      };
+    };
   };
 }

secrets/secrets.nix

@@ -29,4 +29,6 @@ in
   "octodns.age".publicKeys = users ++ [ freun-dev ];
   "mealie.age".publicKeys = users ++ [ freun-dev ];
   "borgbackup-radish.age".publicKeys = users ++ [ radish ];
+  "gitlab-runner/default.age".publicKeys = users ++ [ freun-dev ];
+  "gitlab-runner/docker.age".publicKeys = users ++ [ freun-dev ];
 }