freun.dev: add gitea

hosts/freun-dev/secrets.nix

@@ -30,6 +30,8 @@
           "hetzner"
           "actual"
           "voidauth"
+          "gitea"
+          "gitea-actions-runner"
         ]
     )
     // {

hosts/freun-dev/services.nix

@@ -439,6 +439,26 @@ in
       };
     };
 
+    gitea = {
+      enable = true;
+      subdomain = "git";
+      secrets = secrets.gitea.path;
+    };
+
+    gitea-actions-runner.instances = {
+      default = {
+        enable = true;
+        name = config.networking.domain;
+        labels = [
+          "linux_arm64"
+          "ubuntu-latest:docker://node:16-bullseye"
+        ];
+        tokenFile = secrets.gitea-actions-runner.path;
+        url = "https://${config.services.gitea.subdomain}.${config.networking.domain}";
+        settings.container.network = "bridge";
+      };
+    };
+
     webserver = {
       acme.dnsChallenge = true;
       tailscaleAuth.expectedTailnet = "tempel-vibes.ts.net";