boron: enable gitea actions

hosts/boron.cx.ts.hillion.co.uk/default.nix

@@ -46,6 +46,12 @@
     ## Custom Services
     custom = {
       locations.autoServe = true;
+      services = {
+        gitea.actions = {
+          enable = true;
+          tokenSecret = ../../secrets/gitea/actions/boron.age;
+        };
+      };
     };
 
     ## Enable ZRAM to help with root on tmpfs

secrets/gitea/actions/boron.age

@@ -0,0 +1,19 @@
+age-encryption.org/v1
+-> ssh-rsa GxPFJQ
+O6XXkSIScAPiHbBj6VDHrAzbZjossHPW2AQJtQKkrUmERLABYIZuYFJHk9yH2q2W
+uBdO/jKN8slQ/7fzKMRu/1EKNRscc1ufgrCCDWdZicdNPSy7948dx+mVK0ass/US
+jnPgn75erR+KLsi8/yNJc12mx6onvVFE0mxFihZobiEdt7FcjSFCV9k2pPtN+1TK
+5bKpjyodla+KwSXMGDH7jttvMFXtX5NKda4nYNOM1fHwQ5XCdLti67txcn2y85LV
+fuo9Pzu++o6aFOalfufKyflOh8Vk3RrBwCDK81e+YLMVjSGv4ZsiTp5O+sI8dBwR
+BqftVb523V4L3FhksG/e7Q
+-> ssh-rsa K9mW1w
+xUjF7ctBetl6as6/N1dVa+Zkg8EOfOILOMzCNUQVGStJ0cEeC3vi54xwoTxnZqX8
+n2f6wsgcZP203MBX5YJTw8w80WN8WPNYM8IZxdrcSNNuOrPJQbJZkikYGOg8z9/g
+7zaSotrxcHrHYR2DM/qsQJRYNQgZn7AKviEPwDNSkiGHzolIHRuAi+e2M891/DzA
+k4X5VsYGusM3Lo9ABZvNzX0MEnLxtStl3TwW4i4MgWts4rjcjBAp5ybZPrQLgMf6
+M//FNwBXv2adLSC8oUiTWYKB5l5sTmjNawp1FED3T9WvesKWNY0Tm4KrqJA+Ul2Z
+8aoxg/TCjuuypTIaEPm2aQ
+-> ssh-ed25519 iWiFbA Zl3LbVd8MHnlj1t4LuAcH13UVwHSJb/wSacM5BkTKHY
+vwJ4d2obJPXkgOn44+beKbiKR+qnKvFgkOvotwPDJK8
+--- 2q02v2RlVgBjT3qCe2nAXft976YYbr80qtjw3N9i8Vs
+Ł×?ŢëČ׍[ĺÔ=GľMI(ět¸?ÄÄo⼍/s˝ź¨P}ř™Ńvr,_ţ3×ĂňîÂjŮDJ/;‰ĺdŤut˘;ä‰@+˛

secrets/secrets.nix

@@ -116,6 +116,7 @@ in
   "gitea/security_secret_key.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
   "gitea/security_internal_token.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
 
+  "gitea/actions/boron.age".publicKeys = jake_users ++ [ ts.cx.boron ];
   "gitea/actions/jorah.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
 
   # HomeAssistant Secrets