@@ -0,0 +1,49 @@
+{
+  config,
+  pkgs,
+  ...
+}:
+{
+  age.secrets.codeberg-runner.file = ../../secrets/codeberg-runner.age;
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+    instances.codeberg = {
+      name = config.networking.hostName;
+      enable = true;
+      url = "https://codeberg.org";
+      tokenFile = config.age.secrets.codeberg-runner.path;
+      labels = [
+        "docker:docker://node:24-alpine"
+        "alpine-latest:docker://node:24-alpine"
+        "nixos:host"
+      ];
+
+      hostPackages = with pkgs; [
+        bash
+        coreutils
+        curl
+        gawk
+        gitMinimal
+        gnused
+        nix
+        nodejs
+        wget
+      ];
+    };
+  };
+  virtualisation.podman.enable = true;
+
+  virtualisation.containers = {
+    enable = true;
+    policy = {
+      default = [ { type = "insecureAcceptAnything"; } ];
+    };
+  };
+  virtualisation.podman = {
+    autoPrune = {
+      enable = true;
+    };
+  };
+
+}