feat: add forgejo runner on tower

machines/tower/default.nix

@@ -4,6 +4,7 @@
   imports = [
     ./hardware.nix
     ./home-julien.nix
+    ./forgejo-runner.nix
   ];
 
   boot.loader.grub.enable = true;

machines/tower/forgejo-runner.nix

@@ -0,0 +1,27 @@
+{ pkgs, config, ... }:
+{
+  age.secrets.forgejo_runners-token_file.file = ../../secrets/forgejo_runners-token_file.age;
+  nix.settings.allowed-users = [ "gitea-runner" ];
+  nix.settings.trusted-users = [ "gitea-runner" ];
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances = {
+      native = {
+        enable = true;
+        url = "https://git.luj.fr";
+        name = "native";
+        labels = [ "native:host" ];
+        tokenFile = config.age.secrets.forgejo_runners-token_file.path;
+        hostPackages = with pkgs; [
+          lix
+          nodejs
+          git
+          bash
+          coreutils
+          curl
+        ];
+      };
+    };
+  };
+}