{
  config,
  outputs,
  constants,
  ...
}:

{
  imports = [
    outputs.nixosModules.forgejo-runner
  ];

  services.forgejo-runner = {
    enable = true;
    url = "https://${constants.services.forgejo.fqdn}";
    tokenFile = config.sops.secrets."forgejo-runner/token".path;
  };

  sops.secrets."forgejo-runner/token" = {
    mode = "0400";
  };
}