service: gitea register

modules/services/dmz/gitea_runner.nix

@@ -5,6 +5,7 @@
       podman ={
         enable = true;
         autoPrune.enable = true;
+        dockerCompat = enable;
       };
     };
 

modules/services/dmz/microvm.nix

@@ -1,4 +1,4 @@
-{ config, microvm, nixpkgs, user, agenix, impermanence, ... }:
+{ config, microvm, lib, user, agenix, impermanence, ... }:
 let
   name = "gitea-runner";
 in
@@ -10,10 +10,7 @@ in
     vms = {
       ${name} = {
 
-        pkgs = import nixpkgs {
+        inherit pkgs;
-          system = "x86_64-linux";
-          config.allowUnfree = true;
-        };
 
         config = {
           imports = 
@@ -24,7 +21,7 @@ in
           networking = {
             hostName = "${name}";
 
-           firewall = {
+            firewall = {
               enable = true;
                 allowedUDPPorts = [  ];
                 allowedTCPPorts = [  ];
@@ -72,12 +69,12 @@ in
             };
           };
 
-          fileSystems."/persist".neededForBoot = nixpkgs.lib.mkForce true;
+          fileSystems."/persist".neededForBoot = lib.mkForce true;
 
           environment.persistence."/persist" = {
               directories = [
                 "/var/log"
-                "/var/lib"
+                "/var/lib/private"
               ];
 
               files = [

secrets/services/gitea/homerunner-token.age

@@ -1,22 +1,21 @@
 age-encryption.org/v1
--> ssh-ed25519 1fxDZw BnDSncj1rpXBw/zpVtopFjHMCKeZcXBZRISY7zd+Sg4
+-> ssh-ed25519 1fxDZw +2cFMiJdY+ZtCdokAN05IA6iPV5agWEgD+8mf/TcE0g
-fZii/lRRZTBM6iQmqtyCHGS4tXFABwKGJBS9oMYfvbQ
+0IQ3KuJvsAEQJf5nboUOaw67ikYgQcoKozHTWVAPwM4
 -> ssh-rsa VtjGpQ
-g3lBEHohQ3L4B8lHvoGOGH+Duy1uuGjGQ3qsTwPzfd85g7YuOMBvh9vfWy4PgpC+
+ZQgQJhaJ9rz+nR+BLqFv1UMh5Gz5pEGQhXX9Pc6+SWHLIk2QALmMHoWpICVjk1oP
-OZLzDjha9zPu8MxX1nw0DBhH6WZ/epz0RAUyxuozha/gD8uGrAbrX9csS8Bnzfn/
+kw6lhmxmzmApHRJqzl3FHln9zcMtfsJVKyaXZKbS0RjmkwWIIkFYbHLoGCSi1lEN
-n6aopX/id4ijaXXGX8mIVn2105wIb0bx3nh3A2EurvEzOHn5fzbgyh40SCC8dZT1
+4H/GbC7FzWxGnB5Iv8uhbQa9GUaVQy1o+sTJTX9tkn7+obqnzTfqeZDt89Zh18ly
-eTasf/7iEzlDn+dWoifMT/rsk6Y5ACEpxIngYL0RbARsts07b5M6wRictLd22Ypq
+7SqsNL+WtpZOlB7RJ/Mx+LlHfMEmySQ2MFuCiTGvQEPVfyyp+2wzGh7KmaQ/956M
-0JBgoMjmUdp4dcWx1V2LUa2wTIjkIDCX2grekqapzHutci9uVtfDOavuQd9I0frI
+olO8bkJSgqqWiOriCBVP7YbKGO7zDzVd3W/Sa36BdOb6SiXbT6cGAZbvlixeKPBR
-p6iHQzB2w/5LlC+g6aX/Z/LoCMT3ogEdbhWBOSmEjWQ9pNq9W6jWg4kUvbJOga0X
+uIb9VdgWjKmdXUDBAcaaQpEKdUI8R4mAYesLpi93ViPUH+nMwlY2A+v8O3RidS9C
-sH7JGPBtAvSzz45IkLq6KKORLfgYM2DNaRBgN0rHC5YAE91NfmWpLFWH8S1DHQHI
+iX8qPTpuTL8a1C3e+N6RsqcUNA/Nq6BeByNbn8XEU6RqpucciNu8XSCyHR+ECW4k
-3rUmvY6N5NuUxSIj0fAqQbAgC2k6uxwMXA7h6z8EQRcA2siTpe1AIkvMPoVCmr5j
+JMISTiP84WOL+h7C1q7zu9HzTBA3jWh0sxhfEGi9rbPwppn6XfO2I4apx1uaKvb1
-PAcyWwOqLGg3HGLMonNbNPR+Rv0YMuQNDa6ppAEoGLhofeJYKbS7znI1J66ZM7Ow
+95HEMP83b5fvdPx3mzuG43K7/N3+RGdROUzsK2b21tRDH0XYIEnWJIX0GKA9g9xN
-2eFjDLTA9H3h690srVLNqKrZEu7jhn1qXl+nqpAXmVBG6px5aCW7sSp2wbqo3M0H
+NCU5s4U1OYrYdYGSS8zXuWtnc1P+HbB/u2NppzQc/4a8eVNln76/jurzVHC9ErLe
-Anv3gFd2YWOetIQ2aI3Yd88OGqEQeilZZxgAV0xlbyM
+adWfZ+zaP2FliKmTHCxknLyCCB2+0/0FgsX0EB1BWh4
--> piv-p256 grR75w A8Enx3dlMiGWgqYYQnMALCFW09A/+bxtR0/zRCahONJF
+-> piv-p256 grR75w Av82D2zMKR8dUh4XPE/o76r3bZbMplG/XEr8KGjgK+rs
-kwjOIuuMq0kIgrsu7z2CTeNgqbDJh9LsQhQGbUuTMz8
+oXH7DUDE5nNNrehwgT2heE+r6uh+NJ6tEQTIAY/m0D8
--> piv-p256 RQguQQ Akb2UKr+fhshdjzkuYpvTdz6l8j6tAuDcMnpX2Qq6Zhq
+-> piv-p256 RQguQQ A59JG4hncnWZu+4KnXog5+bJKXTAj/9ulRMXL4jfT71Z
-OTwRoKFV5hwpYygz892IKc8oi2Mqlctp4X04cUGsyvw
+IV0yNfPNQX0vSH5UahQB7W49NIgDFnZ71o8etiL5aXA
---- UuF0QrpyA6x6Z0wa6SmPZxMuob0fhBhTzjedxx2rKy0
+--- uTjO87M1XUksCmCwEIjKf3mD46hQpzsVyIeYrgR5R2g
-ŘXŇŢ™úV|/ëp”yä°…ćRą•ŃçˇAZVî¶f¶†
+A%[éKEAÒ$XX£`Ö¦ýè£S†J…I•EŸs’¢
»_¨låå5©Ê¿ü~<05>!µBD |%4à±*òàÓbQG%X=#ùNñDæ¯fKÂò
-ąĆ®ú}~fçŮŠůţH5ÖČîÔć,Jo˘bPŔ
d<>†N×ůľ<>á