traefik: init gitssh

hosts/sakura/services/forgejo.nix

@@ -4,7 +4,6 @@
   config,
   ...
 }: {
-  sops.secrets.forgejo-runner-token = {owner = "forgejo";};
   services.forgejo = {
     enable = true;
     stateDir = "/var/lib/forgejo";
@@ -43,25 +42,4 @@
       };
     };
   };
-  services.gitea-actions-runner = {
-    package = pkgs.forgejo-actions-runner;
-    instances.main = {
-      enable = true;
-      name = config.networking.hostName;
-      url = "https://git.flake.sh";
-      token = config.sops.secrets.forgejo-runner-token.path;
-      labels = [
-        "debian-latest:docker://node:18-bullseye"
-        "ubuntu-latest:docker://node:18-bullseye"
-        #"native:host"
-      ];
-      hostPackages = with pkgs; [
-        bash
-        curl
-        coreutils
-        wget
-        gitMinimal
-      ];
-    };
-  };
 }

hosts/sora/services/traefik.nix

@@ -12,6 +12,16 @@
   services.traefik = {
     enable = true;
     dynamicConfigOptions = {
+      tcp = {
+        routers = {
+          gitssh = {
+            rule = "HostSNI(`*`)";
+            entrypoints = ["gitssh"];
+            service = "gitssh";
+            tls.passthrough = true;
+          };
+        };
+      };
       http = {
         middlewares.authelia = {
           forwardauth = {
@@ -107,6 +117,7 @@
           grafana.loadBalancer.servers = [{url = "http://100.121.201.47:3100";}];
           hedgedoc.loadBalancer.servers = [{url = "http://100.121.201.47:3300";}];
           vaultwarden.loadBalancer.servers = [{url = "http://100.121.201.47:8222";}];
+          gitssh.loadBalancer.servers = [{url = "tcp://100.121.201.47:2222";}];
         };
       };
     };
@@ -125,6 +136,9 @@
         web = {
           address = ":80";
         };
+        gitssh = {
+          address = ":2222";
+        };
       };
       metrics = {
         prometheus = {

hosts/yuki/services/default.nix

@@ -8,5 +8,6 @@
     ./dashdot.nix
     ./jellyfin.nix
     ./neko.nix
+    ./forgejo-runners.nix
   ];
 }

hosts/yuki/services/forgejo-runners.nix

@@ -0,0 +1,33 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  sops.secrets.forgejo-runner-token = {};
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.main = {
+      settings = {
+        container = {
+          network = "host";
+        };
+      };
+      enable = true;
+      name = config.networking.hostName;
+      url = "https://git.flake.sh";
+      token = "gdeEbeUTifa1nK7EfRgBmvm6XRdQE1zZzAatBRSC";
+      labels = [
+        "debian-latest:docker://node:18-bullseye"
+        "ubuntu-latest:docker://node:18-bullseye"
+        #"native:host"
+      ];
+      hostPackages = with pkgs; [
+        bash
+        curl
+        coreutils
+        wget
+        gitMinimal
+      ];
+    };
+  };
+}