add github_runner

modules/nixos/services/gh/default.nix

@@ -0,0 +1,32 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib;
+with lib.custom; let
+  cfg = config.services.gh;
+
+  sec = config.age.secrets;
+  group = config.services.github-runner.runnerGroup;
+in {
+  options.services.gh = with types; {
+    enable = mkBoolOpt false "Enable GitHub Actions Runner";
+  };
+
+  config = mkIf cfg.enable {
+    age.secrets = {
+      github_runner = {
+        file = ./sec/github_runner.age;
+        group = group;
+      };
+    };
+
+    services.github-runner = {
+      enable = true;
+      url = "https://github.com/zackartz/nixos-dots";
+      tokenFile = sec.github_runner.path;
+    };
+  };
+}

modules/nixos/services/gh/sec/github_runner.age

@@ -0,0 +1,13 @@
+age-encryption.org/v1
+-> ssh-ed25519 gWMdNg EjRmNXb7lLQoFA5ZlfiSLzzsyl9xSfjBNbPQeG/fmzY
+FdDaNGIdsjaQ/h923KRxoC+JmBPA7bi3PuOGANuvXk4
+-> ssh-ed25519 s+NXzQ PtVzYsZZVonwo+xJNOxWCygAKGdbzuW1BkiOEh4KoAk
+hIgkkB0zsqsLEPL9xv2otggJAKYB/hRppi9TnZRojGQ
+-> ssh-ed25519 yEtzbQ S3/WmecK9Z17ucdNAh0di0QSINm9PAB8I9aciWUG2hM
+6dSviN+EM8cse082IKzj672kgxt4zVk9sAUjm7Y3CGw
+-> ssh-ed25519 RMNffg 6vLt65MrQj4aTXqf2LEemKJM9bkXceSMUbvZyXlkjRw
+AnreGe1tkddCE2uIClEXyM+pZVFx5I1fLqFLTUTkqr8
+--- ls56auZRJT5kOLrV1jItAxsMBtFw/mR/okAFHeStSa0
+d~¶Î
+
U;ž6"=Â}íã†ö‘øÒ„æ=ÅãÈ´Ö±
­Hõ’P°<50>\—PžŸéši9
+†ûvÏ›çþ^