feat: Forgejo runner

ansible/inventories/group_vars/all/main.yml

@@ -143,6 +143,11 @@ auto_configure_traefik:
     host: "10.0.2.28"
     port: 3000
     internal: false
+  forgejo:
+    subdomain: "git"
+    host: "10.0.4.30"
+    port: 8086
+    internal: false
   immich:
     subdomain: "immich"
     host: "10.0.2.18"

docker-compose/apps-1/forgejo/compose.yaml

@@ -12,3 +12,27 @@ services:
     ports:
       - "8086:3000"
       - "222:22"
+
+  docker-in-docker:
+    image: docker:dind
+    container_name: "docker_dind"
+    privileged: "true"
+    command: ["dockerd", "-H", "tcp://0.0.0.0:2375", "--tls=false"]
+    restart: "unless-stopped"
+
+  runner:
+    image: "data.forgejo.org/forgejo/runner:12"
+    links:
+      - docker-in-docker
+    depends_on:
+      docker-in-docker:
+        condition: service_started
+    container_name: "runner"
+    environment:
+      DOCKER_HOST: tcp://docker-in-docker:2375
+    # User without root privileges, but with access to `./data`.
+    user: 1001:1001
+    volumes:
+      - /data/forgejo/runner:/data
+    restart: "unless-stopped"
+    command: "forgejo-runner daemon --config runner-config.yml"