From 867a64f14144f5c8b38da0c36a5e70b79a187be5 Mon Sep 17 00:00:00 2001
From: "Casper V. Kristensen" <casper@vkristensen.dk>
Date: Tue, 14 May 2024 01:29:35 +0200
Subject: [PATCH] fogejo actions runner: use host networking (for now)

---
 hosts/sigma/forgejo.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/hosts/sigma/forgejo.nix b/hosts/sigma/forgejo.nix
index 0a072da..314ada3 100644
--- a/hosts/sigma/forgejo.nix
+++ b/hosts/sigma/forgejo.nix
@@ -93,7 +93,7 @@
       # actions require bash, git and nodejs, as well as a filesystem that
       # follows the filesystem hierarchy standard.
       labels = [
-        "debian-latest:docker://node:20-bullseye"
+        "debian-latest:docker://docker.io/library/node:20-bullseye"
       ];
       # https://forgejo.org/docs/latest/admin/actions/#configuration
       settings = {
@@ -101,6 +101,17 @@
           # Default fetch interval is 2s -- no need to spam the server
           fetch_interval = "1m";
         };
+        container = {
+          # TODO: host networking is required to allow contacting services
+          # running on the sigma-public address, such as git.caspervk.net.
+          # We don't need this if we replace Docker with Podman, since that has
+          # actual sane networking. Note, however, that the forgejo runner
+          # requires a Docker socket. Podman can emulate this, and the runner
+          # be configured to use it through
+          # `container.docker_host = "unix://podman.sock"`, but we need to figure
+          # out how to run a non-root Podman user socket easily in NixOS.
+          network = "host";
+        };
       };
     };
   };