labels

nix/home-server.nix

@@ -290,7 +290,6 @@
   services.gitea-actions-runner = {
     instances.infrastructure = {
       enable = true;
-
       name = "infrastructure-runner";
       url = "https://gitea.example.com";
       tokenFile = "/data/runner/gitea-infrastructure-token.txt";
@@ -298,9 +297,9 @@
         "home-server"
         "ubuntu-latest:docker://catthehacker/ubuntu:act-latest"
       ];
-
       hostPackages = with pkgs; [
         docker
+        git
         git-secret
         zfs
         sanoid
@@ -313,6 +312,8 @@
   };
 
   systemd.services.gitea-runner-infrastructure.serviceConfig = {
+    User = "github";
+    Group = "users";
     ReadWritePaths = [
       "/data/cloudflare/"
       "/data/runner/infrastructure"