{ config, pkgs, inputs, lib, ... }: {
  sops.secrets."gitea-runner-token" = {
    sopsFile = ./gitea-runner-token.sops;
    format = "binary";
  };
  virtualisation.podman = {
    enable = true;
    autoPrune.enable = true;
  };
  services.gitea-actions-runner.instances.bolty1 = {
    enable = true;
    url = "https://git.cyplo.dev";
    tokenFile = config.sops.secrets."gitea-runner-token".path;
    name = "bolty1";
    labels = [
      "nixery-nix-node:docker://nixery.dev/shell/nix/git/nodejs:latest"
      "nix-flakes:docker://nixpkgs/nix-flakes:latest"
      "node16:docker://node:16-bullseye" # compat with github actions
      "node-latest:docker://node:lts-bookworm" # compat with github actions
      "ubuntu-kinetic:docker://ubuntu:kinetic" # compat with github actions
    ];
  };
}