From e35c43027ac2c1ef957ab54f6050d9b459fd8532 Mon Sep 17 00:00:00 2001
From: Alex Mickelson <alexmickelson96@gmail.com>
Date: Tue, 27 Jan 2026 21:28:55 -0700
Subject: [PATCH] labels

---
 nix/home-server.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/nix/home-server.nix b/nix/home-server.nix
index cb6a5d9..a3623c8 100644
--- a/nix/home-server.nix
+++ b/nix/home-server.nix
@@ -290,17 +290,16 @@
   services.gitea-actions-runner = {
     instances.infrastructure = {
       enable = true;
-
       name = "infrastructure-runner";
       url = "https://gitea.example.com";
       tokenFile = "/data/runner/gitea-infrastructure-token.txt";
-      labels = [ 
+      labels = [
         "home-server"
         "ubuntu-latest:docker://catthehacker/ubuntu:act-latest"
       ];
-
       hostPackages = with pkgs; [
         docker
+        git
         git-secret
         zfs
         sanoid
@@ -313,6 +312,8 @@
   };
 
   systemd.services.gitea-runner-infrastructure.serviceConfig = {
+    User = "github";
+    Group = "users";
     ReadWritePaths = [
       "/data/cloudflare/"
       "/data/runner/infrastructure"