feat: Add runners

Signed-off-by: Julien Riou <julien@riou.xyz>

tasks/deploy-runners.yml

@@ -0,0 +1,20 @@
+---
+- name: register runners
+  ansible.builtin.include_tasks: register-runner.yml
+  loop: "{{ forgejo_runners | dict2items }}"
+  loop_control:
+    label: "{{ item.key }}"
+
+- name: create runners configuration
+  ansible.builtin.template:
+    src: "runners/docker-compose.yml.j2"
+    dest: "{{ forgejo_runners_config_dir }}/docker-compose.yml"
+    owner: root
+    group: root
+    mode: "0644"
+
+- name: start runners service
+  community.docker.docker_compose_v2:
+    project_src: "{{ forgejo_runners_config_dir }}"
+    files:
+      - docker-compose.yml

tasks/main.yml

@@ -64,3 +64,7 @@
   loop: "{{ forgejo_allowed_sources }}"
   notify: save iptables
   when: forgejo_manage_iptables
+
+- name: deploy runners
+  ansible.builtin.include_tasks: deploy-runners.yml
+  when: forgejo_runners

tasks/register-runner.yml

@@ -0,0 +1,41 @@
+---
+- name: check variables
+  ansible.builtin.assert:
+    that:
+      - forgejo_web_port | mandatory
+      - forgejo_runners_version | mandatory
+      - forgejo_runners_config_dir | mandatory
+      - item.key | mandatory
+      - item.value | mandatory
+
+- name: create runner subdirectory
+  ansible.builtin.file:
+    path: "{{ forgejo_runners_config_dir }}/{{ item.key }}"
+    state: directory
+    mode: "0755"
+    owner: forgejo
+    group: forgejo
+
+- name: register runner
+  ansible.builtin.command:
+    cmd: >-
+      docker run
+        -v /var/run/docker.sock:/var/run/docker.sock
+        -v {{ forgejo_runners_config_dir }}/{{ item.key }}:/data
+        --rm
+        --network forgejo_forgejo
+        --user {{ ansible_facts.getent_passwd.forgejo[1] }}:{{ ansible_facts.getent_passwd.forgejo[2] }}
+        code.forgejo.org/forgejo/runner:{{ forgejo_runners_version }}
+        forgejo-runner register --no-interactive
+          --token {{ item.value }}
+          --name {{ item.key }}
+          --instance http://forgejo-server:{{ forgejo_web_port }}
+    creates: "{{ forgejo_runners_config_dir }}/{{ item.key }}/.runner"
+  notify: start runners
+
+- name: create runner configuration
+  ansible.builtin.copy:
+    src: runners/config.yml
+    dest: "{{ forgejo_runners_config_dir }}/{{ item.key }}/config.yml"
+    force: false
+  notify: start runners