host/istal: add forgejo runner

hosts/istal/services/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
+    ./forgejo-runners
     ./wireguard
     ./docker-registry-proxy.nix
     ./nginx.nix

hosts/istal/services/forgejo-runners/default.nix

@@ -0,0 +1,21 @@
+{ config, pkgs, ... }:
+
+{
+  age.secrets.forgejo-runner-docker-token.file = ./forgejo-runner-docker-token.age;
+
+  local.system.kernel = "stable";
+  virtualisation.docker.enable = true;
+
+  services.gitea-actions-runner = {
+    package = pkgs.unstable.forgejo-runner;
+    instances = {
+      istal-docker = {
+        enable = true;
+        name = "istal-docker";
+        url = "https://git.pleshevski.ru";
+        labels = [ "ubuntu-22.04:docker://node:22-bullseye" ];
+        tokenFile = config.age.secrets.forgejo-runner-docker-token.path;
+      };
+    };
+  };
+}