halkyon/deploy/runner/config.yml
Tizian 「ティツィアーン」 28d22f3e94
Some checks failed
CI / check (push) Successful in 15m47s
CI / deploy (push) Failing after 1m9s
chore: the SSH aliases and CI's runner label keep the servers' names
The servers' names are no secret, so the settings that carry them stay
as they were, and nothing on a server or a laptop needs changing: CI
runs on `sahaquiel` again, the release uploads to `ramiel-fdroid`, and
deploys by hand go through `sahaquiel-deploy`. Prose still names a
server by the domain it serves, which says what a reader needs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
2026-10-14 00:33:51 +02:00

47 lines
1.7 KiB
YAML

# The Forgejo Actions runner of this repository's CI, on learn.halkyon.eu's server. Installed as
# /etc/forgejo-runner/config.yml, read by forgejo-runner.service (next to this file).
# Written for forgejo-runner v13.1.0; its full reference: `forgejo-runner generate-config`.
#
# Jobs run directly on the host as the unprivileged user `runner`, never in containers:
# running containers would take Docker access, which is root on the production server.
# The systemd unit keeps the jobs away from production.
log:
level: info
job_level: info
runner:
# One job at a time: CI shares the machine with the instance.
capacity: 1
timeout: 1h
shutdown_timeout: 10m
fetch_timeout: 30s
# How often to ask Forgejo for work. The default (2 s) is needless load on
# code.halkyon.app's server, a one-core one.
fetch_interval: 10s
report_interval: 1s
# `runs-on: sahaquiel` in a workflow means: here, on the instance's server, on the host.
labels: ["sahaquiel:host"]
cache:
# No cache server (it would listen on a port of its own); the SDKs and package
# caches of host jobs stay in the runner's home between jobs anyway.
enabled: false
container:
# Never talk to Docker.
docker_host: "-"
host:
workdir_parent: /var/lib/forgejo-runner/work
server:
connections:
code.halkyon.app:
url: https://code.halkyon.app/
# From the repository's Settings → Actions → Runners → Create new runner. Not a
# secret; the installation replaces the placeholder.
uuid: RUNNER_UUID
# The token is kept in /etc/forgejo-runner/token (root only) and handed over by
# systemd (LoadCredential in the unit).
token_url: file:$CREDENTIALS_DIRECTORY/token