try to run the checks on ci

.gitea/workflows/build.yaml

@@ -1,19 +1,18 @@
-name: Gitea Actions Demo
-run-name: ${{ github.actor }} is testing out Gitea Actions 🚀
-on: [push]
-jobs:
-  Explore-Gitea-Actions:
-    runs-on: node-latest
-    steps:
-      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
-      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
-      - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
-      - name: Check out repository code
-        uses: actions/checkout@v3
-      - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner."
-      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
-      - name: List files in the repository
-        run: |
-          ls ${{ github.workspace }}
-      - run: echo "🍏 This job's status is ${{ job.status }}."
+name: use nix
 
+on: push
+env:
+    DEV_SHELL_NAME: CI
+jobs:
+  build:
+    runs-on: nix-node
+
+    steps:
+    - uses: actions/checkout@v3
+    - uses: https://github.com/workflow/nix-shell-action@v3
+      with:
+        flakes: .#devShells.x86_64-linux.default
+        script: |
+          nix flake metadata
+          nix --no-sandbox develop -c statix check
+          nix flake check

nixos/boxes/bolty/gitea-runner-token.sops

@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data:2PdY9zSyjmGsHXEYkUBy3gdZ797GsgoZREdEpNhrD9J39C+kcfzcb84tartOHNEk,iv:kcHV0oMmfTZzc/O3W4wgA35AS+GnD8jQ+F1Sf8hhpB8=,tag:5Wqm/vjA8bScq7HGASP/8A==,type:str]",
+	"data": "ENC[AES256_GCM,data:xTGgkaCxOBdMx/Q7zCTmcytr3IMzfDOqU8JrrkU8I78SljRGEPNz7LdDzv52PlfpUg==,iv:1gRhRf+qaQkUAh1zdvkRdjoi8wm6fRZbfMqU3DWS0pg=,tag:jHSqGOUPKtHTVGJujmOUzA==,type:str]",
 	"sops": {
 		"kms": null,
 		"gcp_kms": null,
@@ -47,8 +47,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTXVwRzVSd2NSSi90SVVu\na05jeitPNnE5TVJ1NXk5WGd6UnhObUwveHg0CjU0dTNxUUdtb253ZHdTMFkycWdI\nbjZsanUwSGdHcFZkckIrRDRTWldha3cKLS0tIE8wM09WMnhNeklnYytUWkVTc01E\neldXYlJXRm1OMWo0T1U3UlY4SFBndVEKs56uk3j02g1g7Ae16UGfwRQJghPvS8iG\nDcIrJp6tb5ToYKeAGcTDpDvaQeNWKBX6fSLVIiJbgDWIbbZp1HRYpw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2023-06-02T11:27:42Z",
-		"mac": "ENC[AES256_GCM,data:F7VcjeG5D2S7zWK7S7wji5udaQlcnk9kpFE9G0f86uYZ86XDa+lxaXoF94xOBouJlYS5US5nJfaNxHLka0kO/HEJYNV9aVrB+At8WCsx04Gjt6fNB1APQULvVCzkYYNc6bFQ2KSPXMoSfdALxr1L7WMCDxjPYLYcPCejdW50eK0=,iv:XDdFrWFGTzT+JBAOZ0xWTgBAEpHnDNf2Mm046fQi+YE=,tag:9lcTT01NGsA+mmj6ZlLVVg==,type:str]",
+		"lastmodified": "2023-06-03T10:42:06Z",
+		"mac": "ENC[AES256_GCM,data:EWNq6e7MwoCVf+67ABItZLonhtXCi+/2MHx5tq0F/Ub2My4VyRusEnQIoEGAJNn+vxo8Nd+ZY1EdPEZWqvGe/fmg5aWenoVJzdZHecock37PfZ4se0txSj35EqUFBtOjN5UfP++5HzVXBBXiNY/7HrhDIBScqH/YHCtlZyZR5OY=,iv:cT9IB83vY9iJsXCM0wX5hylaKXQWhqDeH0xtJoeVVng=,tag:pv5W+duzFzY7zV9XhbaBfw==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.7.3"

nixos/boxes/bolty/gitea-runner.nix

@@ -13,9 +13,8 @@
     tokenFile = config.sops.secrets."gitea-runner-token".path;
     name = "bolty1";
     labels = [
-      "nix:docker://nixpkgs/nix-flakes:latest"
-      "node-latest:docker://node:latest"
-      "ubuntu-latest:docker://ubuntu:latest"
+      "nix-node:docker://nixery.dev/shell/nix/git/nodejs:latest"
+      "ubuntu-latest:docker://node:current-bullseye" # compat with github actions
     ];
   };
 }