[albert] init gitea action runner

For now i enabled two runners, lets so how it performs

machines/albert/configuration.nix

@@ -27,6 +27,7 @@ in
       inputs.self.nixosModules.malobeo.users
       inputs.self.nixosModules.malobeo.backup
       ./hydra.nix
+      ./gitea_runner.nix
     ];
 
   virtualisation.vmVariantWithDisko = {

machines/albert/gitea_runner.nix

@@ -0,0 +1,28 @@
+{ config, lib, pkgs, ... }:
+
+let
+  mkRunner = runnerName: {
+    enable = true;
+    name = runnerName;
+    url = "https://git.dynamicdiscord.de/";
+    tokenFile = config.sops.secrets.gitea_runner_token.path;
+    labels = [
+      "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
+    ];
+
+    settings = {
+      runner = {
+        devices = [ "/dev/kvm" ];
+      };
+    };
+  };
+in
+{
+  sops.secrets.gitea_runner_token = {};
+
+  services.gitea-actions-runner.instances = {
+    albert01 = mkRunner "albert01";
+    albert02 = mkRunner "albert02";
+  };
+}
+

machines/albert/secrets.yaml

@@ -1,6 +1,7 @@
 wg_private: ENC[AES256_GCM,data:rSENHGEat9wre1bFcM3LYnlGjf9gmcE9FmeCySzbGZ4SCCUl5QLQN/quXw0=,iv:Bdwlk5UHSiyA9gSW91LUPJyBG50FG/hpwyClzTOUoUI=,tag:/Jw549R5Qmg4WblL7rUE8w==,type:str]
 gitea_token: ENC[AES256_GCM,data:1LevtPr5awIu2rcCGbLIsQA5QO0AhFk5Rep7RG28QdlFHDADCaEoS18pEEZ9NMYMZaGWIBA8Zq/NsCYxQGzuWh3TESZW7CO5kzCaSVG1aqjGpjfbeyG+xQEDtab2Owh+TVN/wVGUUDR1NBlWqE4Shw7mO228CWbxQRSQo3lsLhmf69fLEV1DDnH0Xt7Ml8tr7yLIeWHlG0BeOMKSkY17APahxqBx547Zw+kgaUW3WgTyxeWZaDjk/prK6bYV2euK4Il/4vTZE/x0mThmTThjszcAvdaon+V8y1Ax34gTyAgjvpFC2kE=,iv:1A8YNv/A0MEkGKV5Z9WPI4LwQFu2Z9BWuN2yfFHCPLI=,tag:hEfskDEAQiriXNjcYzziSg==,type:str]
 cache_priv: ENC[AES256_GCM,data:NbfyBv68UCWuSjbUu5lFUXPgG+vYrxbAQeD77YlklTRm6MVS4lAEjUzjnjewcX6Khca1N7r7vGieFyaBlQm0264KGTP5tc7BnEIKJDOD/UHQBdMpZgUzd2cKQWK7Kx0=,iv:6VWsZd/VDjQ/BhfwHZBcL3Zp0W/9sO/ZC9sF1Jnqguo=,tag:/gSe6TyaZDKoRFaRKiYyzw==,type:str]
+gitea_runner_token: ENC[AES256_GCM,data:CLVJQkSB/b2yNmx+yMxbHt05TlJnAGypIDkGZly0ntvjPDEZk0l2Ng==,iv:QuPnTKibAsUO1Z4+jt2Q8WQfxRCoKdJ1iDrc+QTp2yY=,tag:AfXUV27DuQm85zzJdXWH4w==,type:str]
 sops:
     age:
         - enc: |
@@ -21,8 +22,8 @@ sops:
             N6DSIVisJf7qNuNw6M0J5nny6xfWeIEZJettF0xSHM1gSfr7oUbHOQ==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1mfarz0n7qfa7vg8zz355qf8eregm6myl38lld0h767nuvhgjqd4qruxuhn
-    lastmodified: "2026-08-26T17:31:59Z"
-    mac: ENC[AES256_GCM,data:G0Xpe7zJZh4xAwFRUXSbR11ENqRd4UoU7gFK3nDM7Icm9DMyqyi3uBfg1j0c8yTCInIrnyX1dy7zUWjns+OAbXv8CMLXVUPdomgCxX0zUWEkTzgQqnJy97KFAmPPPMCGTUby3TMVQkcrk5/iATmydSMhs0lKErS4737u9jen/3I=,iv:YB3BqypuvamDJy64FeaSUQBCAdlr7a9UWJDNhGsTRvo=,tag:lXc7heG+MRiUo+SfRcRDNg==,type:str]
+    lastmodified: "2026-09-11T11:22:54Z"
+    mac: ENC[AES256_GCM,data:lpaFsWXMdJCgsvZPG9BTbntyk1FbjiFySUEUyymbBAJttvTToJSSDG3YgcB1J80+K0Unap0/5V4XP49OvBInj+jEbmXGbYwK9ayfHQ/jIyzKfLFJFhvsMuWvo3++W17Txdw3X8g8F5YEhkxBzgeLtbT6IPwXEgFPb/YUEpnHh1Y=,iv:JYt+YHLhZaiShlTh1Ik3le4+pIz2/ioOznihj0XQFdE=,tag:8K+7fjPjfg1oBEpu5GXPQg==,type:str]
     pgp:
         - created_at: "2026-08-20T15:43:21Z"
           enc: |-