add core configuration

modules/runners/default.nix

@@ -0,0 +1,32 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}: let
+  cfg = config.lily.runners;
+in {
+  options.lily.runners.enable = lib.mkEnableOption "activate plasma";
+  config = lib.mkIf cfg.enable {
+    # Example 
+    # age.secrets.lily.file = ./secrets/lily.age;
+    # services.gitea-actions-runner = {
+    #   package = pkgs.forgejo-runner;
+    #   instances = {
+    #     lilyvex = {
+    #       enable = true;
+    #       name = "caz-runner";
+    #       #    token = runner-key;
+    #       tokenFile = config.age.secrets.lily.path;
+    #       url = "https://git.lilyvex.dev/";
+    #       labels = [
+    #         "node-22:docker://node:22-bookworm"
+    #         "nixos-latest:docker://nixos/nix"
+    #         "ubuntu-latest:docker://node:16-bullseye"
+    #       ];
+    #       #settings = { ... };
+    #     };
+    #   };
+    # };
+  };
+}

modules/runners/secrets/lily.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 gwCq6Q YfhZEEqe8nFJInm13FuPk3lAS5MpTHeTbPYE2czQJmk
+YApzb5JSzg+hGULtJGOzH04XWuzjTtf4jB9rPnweBzU
+-> ssh-ed25519 TvHG8g o8lSKhyOUvW8lz303Z6b5/TasTiN4ENcS0Bg1ZAugFA
+e5tvFv819718uInabUIRJYOC45f/MYQkI4jep+DA+6o
+--- Hw3Q1yUIXUmajkeK0sBRjLQcR4GjFh97hTu9jTIopIM
+.<2E><>-<2D>ԓN1<4E>3$<24>0<EFBFBD>\	<09><>2<EFBFBD>p<EFBFBD><70><EFBFBD>|/<2F>y<EFBFBD><79>7S<08>X5bLdI<64>t<EFBFBD><74><EFBFBD><EFBFBD><EFBFBD><16><><EFBFBD>r<0B>F<EFBFBD>2`<60>X<1B>s<><73><EFBFBD><EFBFBD><EFBFBD>#<08>

modules/runners/secrets/secrets.nix

@@ -0,0 +1,19 @@
+let
+  lily = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHj4f4GlA+DP491i9ssmm+Ys/TLikz6ALk1kkglhcywY lily@GreenMachine";
+  users = [lily];
+  system = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID/rgN3hR4K2Mu/Oy3tgaGfDfCss3CrNJn2jTTQJQKKn root@nixos";
+  systems = [system];
+in {
+  #    age.secrets.potato.file = ./potato.age;
+  #    age.secrets.lily.file = ./lily.age;
+  "potato.age".publicKeys = [
+    lily
+
+    system
+  ];
+  "lily.age".publicKeys = [
+    lily
+
+    system
+  ];
+}