Add gitlab-runner to Linode

hosts/linode/default.nix

@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ pkgs, lib, config, ... }:
 
 {
 	imports = [
@@ -26,6 +26,7 @@
 	];
 
 	networking = {
+		networkmanager.enable = lib.mkForce false;
 		hostName = "linode";
 		domain = "thehellings.com";
 		nameservers = [
@@ -33,6 +34,41 @@
 		];
 	};
 
+	age.secrets.runner-deployer = {
+		file = ../../secrets/gitlab/linode-deployer-runner-reg.age;
+		owner = "gitlab-runner";
+	};
+
+	services.gitlab-runner = {
+		enable = true;
+		services.deployer = {
+			executor = "shell";
+			registrationConfigFile = config.age.secrets.runner-deployer.path;
+		};
+	};
+
+	users.users.gitlab-runner = {
+		isSystemUser = true;
+		group = "gitlab-runner";
+	};
+	users.groups.gitlab-runner = {};
+
+	systemd.services."gitlab-runner".serviceConfig = {
+		DynamicUser = lib.mkForce false;
+		User = "gitlab-runner";
+	};
+
+	security.sudo.extraRules = [{
+		users = [ "gitlab-runner" ];
+		commands = [{
+			command = "/run/current-system/sw/bin/systemctl";
+			options = [ "NOPASSWD" ];
+		} {
+			command = "/run/current-system/sw/bin/podman";
+			options = [ "NOPASSWD" ];
+		}];
+	}];
+
 	environment.systemPackages = with pkgs; [
 		bind
 		graphviz