nixos_forgejo/ci-runner/configuration.nix

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running `nixos-help`).

{ config, pkgs, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
    ];

  # Enable Flakes and the new command-line tool
  nix.settings.experimental-features = [ "nix-command" "flakes" ];
  # Set default editor to vim
  environment.variables.EDITOR = "vim";
  # Use UEFI
  boot.loader.systemd-boot.enable = true;

  # Use the GRUB 2 boot loader.
  #boot.loader.grub.enable = true;
  #boot.loader.grub.device = "/dev/sda";

  networking.hostName = "forgejo-ci"; # Define your hostname.
  # Set your time zone.
  time.timeZone = "Europe/Berlin";



  # Define a user account. Don't forget to set a password with ‘passwd’.
  users.users.lyn = {
    	isNormalUser = true;
   	extraGroups = [ "wheel"];
    	openssh.authorizedKeys.keys = [
		"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMQfF+7FQO57dTmnhm0NLL4Av0g6yKLsfZlDFll+sCqyJJ0r1kSIGAumcXTVRjfwJIGXKZDU1+D4h1skd1gzFqM= forgejo-ci@secretive.Macbuch-Pro.local"
	];
	packages = with pkgs; [
    ];
};

  # List packages installed in system profile. To search, run:
  # $ nix search wget
  environment.systemPackages = with pkgs; [
    git
    vim 
    wget
    curl
    docker
    pkgs.forgejo-actions-runner
    
];
# Enable docker
virtualisation.docker = {
  enable = true;
  daemon.settings = {
    fixed-cidr-v6 = "fd00::/80";
    ipv6 = true;
  };
};
# Forgejo actions runner
services.gitea-actions-runner = {
  instances = {
	  "shibepro-ci" = {
	    enable = true;
    	    url = "https://git.shibe.pro";
    	    name = "shibepro-ci";
    	    tokenFile = "/etc/nixos/ci-token";
    	    labels = [];
	  };
  };
};

  # Enable the OpenSSH daemon.
  services.openssh = {
	enable = true;
	settings = {
		X11Forwarding = true;
		PermitRootLogin = "no";
		PasswordAuthentication = false;
	};
	openFirewall = true;
  };
  


  #enable qemu-guestagent
  services.qemuGuest.enable = true;
  # Disable password checking for wheel group users so we can solely rely on ssh keys
  security.sudo.wheelNeedsPassword = false;

  # Firewall stuff:
  networking.firewall.enable = true;
  networking.firewall.allowPing = true;
 
  # Open ports in the firewall.
  # networking.firewall.allowedTCPPorts = [ ... ];
  # networking.firewall.allowedUDPPorts = [ ... ];
  # Or disable the firewall altogether.
  # networking.firewall.enable = false;

  # Copy the NixOS configuration file and link it from the resulting system
  # (/run/current-system/configuration.nix). This is useful in case you
  # accidentally delete configuration.nix.
  # system.copySystemConfiguration = true;

  # This value determines the NixOS release from which the default
  # settings for stateful data, like file locations and database versions
  # on your system were taken. It's perfectly fine and recommended to leave
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
  system.stateVersion = "23.05"; # Did you read the comment?

}