runner:

new image
added host for network access

flake.nix

@@ -61,23 +61,6 @@
               home-manager.useGlobalPkgs = true;
               home-manager.useUserPackages = true;
             }
-
-            ({ pkgs, ... }: {
-              ixpkgs.overlays = [
-                (self: super: {
-                  inadyn = super.inadyn.overrideAttrs
-                    (oldAttrs: rec {
-                      src = pkgs.fetchFromGitHub
-                        {
-                          owner = "troglobit";
-                          repo = "inadyn";
-                          rev = "7d576c4d00d312597c2b9c06c00529d2dde5ac89";
-                          hash = "sha256-EJ9/MZhz/Gjj2RCMRDkwuKRatig/t1wAqQRqOcHA2gc=";
-                        };
-                    });
-                })
-              ];
-            })
           ];
         };
 

hosts/carbon/services/forgejo.nix

@@ -35,9 +35,16 @@
       enable = true;
       url = "https://git.${config.networking.domain}";
       tokenFile = config.age.secrets.forgejo-runner.path;
+      settings = {
+        container = {
+          # TODO fix: networking
+          # instead of using host, create a subnet that cannot contat other server on my network to avoid being haxxed
+          network = "host";
+        };
+      };
       labels = [
-        "debian-latest:docker://node:18-bullseye"
+        "ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
-        "ubuntu-latest:docker://node:18-bullseye"
+
       ];
       name = config.networking.domain;
     };

secrets/forgejo-runner.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 VxAJjg FCHQ8R8lunZeC1W5GgHRuXOzKebT3H7+WgmkfC1MhHI
+-> ssh-ed25519 VxAJjg eaOCTyyjDYAV78PNN8b7EMzwDIKCFA6eKElF4k+Dfjs
-Yh11JHjmuMCNl4cGpJYgYEHxfGSPtCaE5WNvEldh+FE
+ctHZ/87qQN2r6AUpm7fQ+kpgbZ8KHUC04VV0vCdBDRI
--> ssh-ed25519 pw11Hg bwbMaWmmWy5N9DlvWbLc8Np1ZsVyvFBFzKuc+AC46G0
+-> ssh-ed25519 pw11Hg XZMBOseFbvE2QGrmm97XOXNr1B+G2PERwcYGrQEvRh0
-mMk+gUs+HDVF7Ud36JUZYrocc4rlDpjcmIlG6Zov34A
+P45AmFLCsROrWygWjppB7KSMgxncuJVgbDgmv2jx1XY
---- G5mTwB+gZ3fJx1OyFbHnvYpYmjDJEAjKJAPd9LXBHHQ
+--- hvN1ZYQtkkAeRUdTkmMs1mPXj7NSkZQH2IwFa6wqZa4
-î`H@G—§}Ê
ƒ
¸cÊó”ê>|€gã­Ðý”’@ò/9Òb°°
mMx,}¶»gE¾"ìw4§Jä³^«ù‡úž
+ù•Ö‡ån–<K¥H<12>ñ[Ã
+ú1ÊA^¼{Uè&¯)ZîÕÆ8ÓÿB÷™`oß*e{ˆ±Ll!£ÎrÆ¡"·ÛÁ’ךz,<>