thanatos: setup gitlab-runner

hosts/thanatos/default.nix

@@ -35,6 +35,16 @@ in {
   };
 
   services = {
+    gitlab-runner = {
+      enable = true;
+      settings = {
+        concurrent = 4;
+      };
+      services.default = {
+        authenticationTokenConfigFile = config.age.secrets."gitlab-runner/thanatos-runner-env".path;
+        dockerImage = "debian:stable";
+      };
+    };
     openssh.enable = true;
   };
 

hosts/thanatos/secrets.nix

@@ -15,6 +15,7 @@
       lib.mapAttrs toSecret {
         "users/alarsyo-hashed-password" = {};
         "users/root-hashed-password" = {};
+        "gitlab-runner/thanatos-runner-env" = {};
       };
   };
 }