feat: add gitea actions (?)

config/git-gitea.nix

@@ -28,12 +28,24 @@
         type = "tar.gz";
       };
     };
-    # gitea-actions-runner.instances.default = {
+    gitea-actions-runner.instances.nixos = {
-    #   enable = true;
+      name = "nixos";
-    #   labels = [
+      enable = true;
-    #     "test"
+      hostPackages = with pkgs; [
-    #     "nixos"
+        bash
-    #   ];
+        coreutils
-    # };
+        curl
+        gawk
+        gitMinimal
+        gnused
+        wget
+        devenv
+      ];
+      labels = [
+        "native:host"
+      ];
+      tokenFile = config.age.secrets.gitea-action-token.path;
+      url = "https://${tools.build_hostname "git"}";
+    };
   };
 }

secrets/db-postgres-initscript.age

@@ -1,10 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg 8eLs5ddKNfjy5HIB3s3n7/zwWK2pafmm3mL6KCU1Ml8
+-> ssh-ed25519 jxhkLg nhsxlUI4PhQ9Zs06Ot0d3FWRf90JNPY9zVFvyoHtg1g
-NbjbxnnCpalrUFpX70eh97ZGw0MrXdcgdZSEGMIluoY
+Aa/zziP5k2jXjuuhGfKPcfbBAVBeHhGJ/AKAf9ZlAVc
--> ssh-ed25519 tqMvRA ZLf/60XKMOu1qSPDYTzyH/3zY/U3jn25yqOa2+Sn+x8
+-> ssh-ed25519 tqMvRA PgZq5OsVPiLn+yhqyzIhvcdAEuK8j09+JIWMl5q/OwY
-gZC7CODxSsYyWMLz4M4cGXn2aCCVBJgOINPJvjaTKb4
+KD3lXAlxuTX8BKIkadcfFW31i0EEJOK+KtxrCfcOhjg
--> ssh-ed25519 720szw LZok3/qCE62O1xpOrNFZxdOL4hcJdQZLd5sLbPkNdmE
+-> ssh-ed25519 720szw g/qHTLwSoptRnScQUYGUUPN0sB6rKujTNq0rcBimWy4
-8ssC/uc3/qXl517k3ise3OvUvA/zlN3Ja/dlBgaQ3tA
+4ZgnlZbyEK3lvEIqpwGdbDWdCJwoDYMfLEaTJFO+1Gg
---- XJeZN9O60K6Ak2n6vuQ+Ypnk5NuhNlZOFMC5E0wVU04
+--- cFv9WIMvyobM8VBthejlNxTgcIVXqm36Ey9oDA3wqDs
-¬-êG©§µCw-/ˆwõ±R÷ÕÀ<C395>C¶û<C2B6>ÄÑ~ö'8¾-½
+v“ ÆYæµ@³‰®sÅjd‰ýÑUY{>k
-øAˆž"iG(”aÒ|¨Ô<¡¤0Îö#<1D>Ä_~óhðäT­"Øž\{Ídz-l~iŸ‰¥ÆÞCFÈ2]Bãg)>ä—
+ðOÐYáB.‚oKŸw~›mÒà5ÿ°²‚Ñ3¿¨òˆ)Œó¤l|ì–’ðI¼™äF0ÍÁ+FÑq¬æ1`<60>‰ä"ã	Ø –gÍœÄÐí1

secrets/gitea-action-token.age

@@ -0,0 +1,11 @@
+age-encryption.org/v1
+-> ssh-ed25519 jxhkLg 6rjc6L3cw266S8ZB3dfWdi7ZbUJvUVDQxaI8wZ6sE2U
+6HjbTKYkGcZCCl9ZqDP14PRAboJqjZTJnR4ospWNsfs
+-> ssh-ed25519 tqMvRA itOaWaglrbLptCsjsXiE/zpKciB2Ok9niyUaa/OR7X0
+K56nAwMZH5mEDbO/xDT/XGFVMcpfcVQQXDowu9w4XEY
+-> ssh-ed25519 FOCPAw 1aLbv8OtZ+INUfm1gR/m3zHEquktbYwHxLiEJMq5Dy0
+AW6y+/iFaNtKmH7q4Y54maV0ej1avW0AZtOhsuC65+0
+--- YiaHJcgQ502Cy9PWLeEbwJN5AN5srB3ED/KYbxJ53xw
+&µ‚¡ã
+JR'«ÿVé-JÚMŸ=´~'[ÞJ ©
+q´û ôUõí§÷ÙÓÌ#U×jþ†’Ou0m…S¯ËûhQÛ$w29É­Ç

secrets/metrics-pve.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg s68L/ORJQ1LJF5F3CZ8z/2FmCYlXllFHrJjMxov0qlc
+-> ssh-ed25519 jxhkLg pZQSx8rPC75lbv07ARhHQ3gFQoE6g/KyC55fUBcgvG4
-42ABucRpgxxvNWm/ufA7V/b7m2XWK+3xcHzymPF0VaQ
+H1XAoyHg8aL+hYUqa2+DXIfQ4h3AbCtoOvOiJPaAVGg
--> ssh-ed25519 tqMvRA na19byAvI21z/+ODPL3qafqdVd32oLdAN88tp0f0GU8
+-> ssh-ed25519 tqMvRA N3VmUrv5UCBrN+/SAFAdwKtj8hDsk5tm9RIDjyuPPic
-6RSTSy0TCy1BVcyqijU/Dg5eBkREEiT5off75G+Flm8
+RWeO0gPtm22Q6+tDsAUCldifLmdW9FBTp7zl+Bi2v7k
--> ssh-ed25519 hKRBdw 2/X+Dv3TEt21SF1i6tQ9AMLfd7KQ2NCyiiZzHIMFrUo
+-> ssh-ed25519 hKRBdw R1ZLmNRfT5M4Nifn1UlACanK8HaXPxuX066G7tdlqCI
-Em8FjDhe9J6G+awK9zsdrd+LtC5DT7u4+tvVSb1/pYY
+DHCZj83+hKgBDkW2TZGhDmiTbkmo0QBH0BFXAdbwezs
---- t+oO9p9wqHWOuUsy2EdGff7SkywtlWyk3PhXriJ5rLk
+--- etcWgfzdqW9DypBbNy9YS+qROSxsznubGtYveUJzHE4
-ÿ<>‘<>º
FLWΣæŸï½YƒêAØÎѳåvºŸ+kÚöŸ³\SFûÝâC/9FßW#ÔÒ›yÛ•øwµö'm^šÚ^%„Þÿ<Pýf–rE'æHÙ	y²áØ•É€ˆÿºåÛöNôÒ¸”piõRJ

+ísA[7a}´F’^öŒ°7nX“‘S70é~ö+<2B>éÛì¦h‹Ü.Ã6‹üÚ$¬R%—ˆV%ÿï8
»”·fp4~¬U鎉Â<E280B0>]É^÷ÚA—Ž×þI®V;dÛË<óY¬D£<6KMŠþ„:PY€<0F>-w‹§%÷

secrets/mqtt-exporter-environment.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg zgYm0/IF1/Xdj7JBp+oICW/bEuZZD5rWRmrXCGx1qXI
+-> ssh-ed25519 jxhkLg oqT/hLbJ4tHt3GyEUwK0kPGqQNh0cu3YsSEFYNF3bG0
-OXZHX6sVWb7YKg0xApx/yRTRQ4O6U/7Awuh3LtWDZJ0
+gcJGPB9CZAputqkjA0UnRhDbKvsfibhjPKpnBDAZXzQ
--> ssh-ed25519 tqMvRA WxKTFFHFMROV3FGz5n5En8Ng3ZA6ri7lTln+LmBW5Ds
+-> ssh-ed25519 tqMvRA 7KPFjFLLfl/GHiCzeDhar9k6fJWVE77kCMHFVmNejUQ
-BJ9hp5Xf43hOFVlXVdu5rQCVYgfvn2K6JRmK/mnB2Ps
+KNg74PAk25e86ccLrSVTkw5e//eOGgdL2QowacgFAeM
--> ssh-ed25519 5VK9ng 3HOprdaCdSOsxy4H4HulGTgxmKNHq3M+1eeGLxtXH34
+-> ssh-ed25519 5VK9ng PHLPIOzTQX9cQlnuk9cdhtteWhf2iHF3tYlxtl+L9BM
-WLZ1xsVS3dg5yP5FabuIEjm/lgl3GLq9fbhfDgQ0nXM
+0P+Df+M5Qa8PGmcsCprP9TqInRoUrq1N54IBIf92bsQ
---- aAncZ/pY0yGb3QZeBpew12pY8ubrL2PO0l8DZqTcRMY
+--- GefDSUxddbMiCx94NHP1Gco9iHnQuF7E3wyT1E6FBu0
-¢Öî*Å…:ëA«yø"ò«EyÚ©NCQŠÆÇh­¸;ä[à9Õ}L«;ci÷z
)ÌIª’Yt+¾´ú–“e
+°*ámÒɶF«õ‹§3‰Ë)Üção6
»sè³ÇêíŸdŽµ;ãoÞ¶VÝqÐŽ5(7šö	a)Ÿ:F,0¿¬

secrets/mqtt-password-frigate.age

@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg irrsKDDay7MES1geZ15cqL3AyqBBzJ0mEC1kVeX97TE
+-> ssh-ed25519 jxhkLg mxHJnoxwoHsZ8EGvOW968a1ZtcAe/dycqlLuDPC4k3Y
-9dOyx3LRjDa6RREeHel08qKEMtmTvuH3o3Rit/lq9pI
+cuKt+V7KM0n4FPCbxsp1/QJUsC0UFRL87Nx3JVvOZY8
--> ssh-ed25519 tqMvRA pWZspBwWS1WDlHBMW4V3FzhmrHY+pSGGnoVLgqXK51M
+-> ssh-ed25519 tqMvRA 4X4n8CCreKfKeNboCtV/uBBHSL50fx+RnSfFq9Jzq2Y
-ob4bkKrj/UIpQlZpqra6hH3fS6p9aSCz0z1EYc+85cs
+fuW8I4VhOlDG86PjKz8RPDX8CH/xhmHiYH1IVy1qqk4
--> ssh-ed25519 5VK9ng Ws1aNLFLK7OaDzX3x2h9QuJJ143Nx6jvxbVqhTYsahc
+-> ssh-ed25519 5VK9ng efen1poRKjRcg14LAqPWjdxnVQSiUdxJv89jqsQLvWE
-2Pn1ndhbAO7axpfmfmaeLo37zSy2ZbIjpstwMJMERVM
+5MEJUWF9oOuGkNqiqI+j+GIEF+MsHayW70d0GO57ZKI
---- WtjXEKoVwsTHH7OjsMlTAc6iVjh35tiRwBKcMgsqnDU
+--- ZzCzhIPy2YMVY18MDCLdmHes5HMcthAN8zbzJ7HtZ4E
-q4|žA<C5BE>"2À·d&4‚,;uH0
+ŽzqN™›]XY±Îp‰åežoÉ‚ñ±¦i*Qœ›Ô1üP
-ÜîOñ¼-`FGÿ<16>×X

secrets/mqtt-password-ha.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg Uc9jtkuMKoM3Dq9XrknXoDQB2RmegRPI8C8Sl6bk6xY
+-> ssh-ed25519 jxhkLg scQNigFhHkp1smpOIb3vlH9IlBYpEJLsAteksgjxyGo
-WUE0ti7WHxO9xBtQRIqh12LdV7c25paqBVXPFwmgXYc
+wGL+Jijs4pij0p1GTeyup8nlAmFY4IhDBEYb+A61Ffk
--> ssh-ed25519 tqMvRA bfIfKq+o0mdMIxJ6PoGS9fOH7EE+XEeCCe5xUms0CE4
+-> ssh-ed25519 tqMvRA hbn1sqr3Huu3IRir1WgxfmpS1bp7w19k+W+hoWTMaEE
-+NGLKID+i6adDd9o5FvkJhiUJzHDCtQ2ryYZ7AxqJpg
+7sa7egzPSJMLkVOZA8nHuH41JhA4PBI3KmPoFrfidVw
--> ssh-ed25519 5VK9ng tdcfRS2iT1z8cDR0Wxia60Yg8/bRmov5TgA88R7Sixg
+-> ssh-ed25519 5VK9ng 3IA/fR+66AROsXwUkJuODM2Drf2ahQUOu4V0sT9iPVg
-8wNwRPn6xdMfjf5lUGu16yd5HamnC2urrp1XsYBoZdw
+sn/RcT/G2glMN1qQURueH4nXd8w+pDNaF79kommL5AA
---- 880QcBbcatDgFTx0Ywqw7XRhKjRLAkh282Ur5YJeGlw
+--- z+bXy1kwyxHtqX50RVJNwNZaofUvd7eJlpO9+R9Lhos
-&,æÜ&6¢G}îÆ[ÁŽ¼²BQ^7ÕÜn@IÖ¶5<>	¸9Â<39>ñÓDëz»P†Ɇ@{
+Ø<EFBFBD>·RmAig«<pŽOïÈ.¬Ê Ttø—dF-[?'ãþM<C3BE>ÍäˆÈ¹‚åˆ8

secrets/mqtt-password-mqtt.age

@@ -1,10 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg +2xI8fsv4KcarfXx8NphB0QjIwAV7R+FBVoWkDQV7H4
+-> ssh-ed25519 jxhkLg i1qpgd/+vg/M0QxOLBc+MU+slQO/LT65AeLb5QGkhi8
-risfcWsUxx+fjFYn08/eEiKX+r6p6NLYb3bNlDYvwtE
+nPOJ4W2rV7PmEJP+i3E8HJcEydxAbhXGQEj6LYmJlmc
--> ssh-ed25519 tqMvRA ZfNVhQ4nborZUf2ikK1GsDiLouMO/3rlSahwBJ4hoBA
+-> ssh-ed25519 tqMvRA B20rufsWhjL/vcf1vIC4F/GXhKjHQghfsloN+k5EwGc
-mX0AAzypDnDKQ+CmLJntOMpcC223yk02/2VyAZS9FxQ
+ut2gX6hbpoFbQFBromxf8IwMrdcpp/uxTXt51BPxO2A
--> ssh-ed25519 5VK9ng x05wLhN/ZM2sDY7Gm/M2wOa47pb0MfbPIrjUeBzSizI
+-> ssh-ed25519 5VK9ng EuvmW+RuHKXam+09HQLZ2vZ16Fuiz0XD3cQHPZK+Yw0
-C4RYyZZdDZ9s7z6kd6edDzLiTwW8p6wHFjvKLUBAcUs
+xBr1urEBWxon8XZVhJq6LeHomeL9hdW1SqLT4vhHB/I
---- lPUw8eGSEdoh8VZd3n1trss9mvV8ONpNiAXTr0sWWBo
+--- JQ637Hkl9mH1dkk41o4Z1XC+1FU17tiRKvyDQNHnSpY
-$É3604Žíûû¸
+®ß½ßkçJ–®Xƒ¦˜qxÒHýC¾²L&ú«<C3BA>ÅÈÎ-‹Ýhj<0E>ô<EFBFBD>tó&øítQ
-8î2¤€qøMÓ	ióÅÞO§Â¤~bŠ<62>oIêp]´	¼]ì

secrets/secrets.nix

@@ -19,6 +19,9 @@ in
   "db-postgres-initscript.age".publicKeys = users ++ [
     keys.db
   ];
+  "gitea-action-token.age".publicKeys = users ++ [
+    keys.git
+  ];
   "finances-app-key.age" = {
     publicKeys = users ++ [
       keys.finances