Add Forgejo runner to CI host config

hosts/ci/configuration.nix

@@ -4,5 +4,7 @@
     ../../shared/base.nix
     ../../shared/hardware/vm.nix
     ../../shared/disko/basic-ext4.nix
+
+    ../../servers/ci.nix
   ];
 }

hosts/installer-graphical/configuration.nix

@@ -0,0 +1,13 @@
+{ nixpkgs-flake, ... }:
+{
+  imports = [
+    "${nixpkgs-flake}/nixos/modules/installer/cd-dvd/installation-cd-graphical-combined.nix"
+    ../../shared/base.nix
+  ];
+
+  isoImage.squashfsCompression = "gzip -Xcompression-level 1";
+  networking.wireless.enable = false;
+
+  #Many installs will need this, and it won't hurt either way
+  services.qemuGuest.enable = true;
+}

hosts/installer-graphical/state.nix

@@ -0,0 +1 @@
+{ }

hosts/installer-minimal/configuration.nix

@@ -1,22 +1,10 @@
-{
-  pkgs,
-  lib,
-  nixpkgs-flake,
-  ...
-}:
+{ lib, nixpkgs-flake, ... }:
 {
   imports = [
     "${nixpkgs-flake}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
     ../../shared/base.nix
   ];
 
-  environment.systemPackages = (
-    with pkgs;
-    [
-      cryptsetup
-    ]
-  );
-
   isoImage.squashfsCompression = "gzip -Xcompression-level 1";
   networking.networkmanager.enable = lib.mkForce false;
 

servers/ci.nix

@@ -0,0 +1,26 @@
+{ pkgs, ... }:
+{
+  networking.firewall.trustedInterfaces = [ "br-+" ];
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances."forgejo.sinerva.eu" = {
+      enable = true;
+      name = "ci-forgejo-runner";
+      token = "/persist/secrets/forgejo_token";
+      url = "https://code.forgejo.org/";
+      labels = [
+        "Ubuntu-24.04-LTS:docker://ubuntu:24.04"
+        "nixos-latest:docker://nixos/nix"
+      ];
+    };
+  };
+
+  virtualisation.docker = {
+    enable = true;
+    daemon.settings = {
+      fixed-cidr-v6 = "fd00::/80";
+      ipv6 = true;
+    };
+  };
+}