forgejo-runner-external(host): configure forgejo-runner setup

Configure connection for the DI-Day/website repo.

resources/chaosknoten/forgejo-runner-external/forgejo-runner/configuration.yaml.j2

@@ -0,0 +1,52 @@
+log:
+  level: info
+  job_level: info
+
+runner:
+  file: .runner
+  capacity: 4
+  timeout: 1h
+  shutdown_timeout: 30m
+  insecure: false
+  fetch_timeout: 30s
+  fetch_interval: 2s
+  report_interval: 1s
+  labels:
+    # https://forgejo.org/docs/latest/admin/actions/configuration/#choosing-labels
+    - docker:docker://docker.io/library/node:lts
+    # Provide ubuntu labels similar to the images running at Codeberg.
+    # https://github.com/catthehacker/docker_images
+    # https://codeberg.org/actions/meta
+    - ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest
+    - ubuntu-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04
+    # Alpine
+    - alpine:docker://docker.io/library/alpine:latest
+    # Debian
+    - debian:docker://docker.io/library/debian:latest
+
+cache:
+  enabled: false
+
+container:
+  # Leave emtpy to create a network automatically.
+  network: ""
+  enable_ipv6: true
+  privileged: false
+  ## Something like this once gVisor can be used.
+  ## options: "--runtime=runsc --mount type=bind,src=/etc/gvisor-helper-resolv.conf,dst=/etc/resolv.conf,ro=true"
+  # Leave empty for default /workspace to be used.
+  workdir_parent:
+  ## Something like this once gVisor can be used.
+  ## Add /etc/gvisor-helper-resolv.conf to valid_volumes to make the bind-mount in options work.
+  ## valid_volumes: ["/etc/gvisor-helper-resolv.conf:ro"]
+  # Leave "-", so no docker host will be mounted in the job container.
+  docker_host: "-"
+  force_pull: true
+  force_rebuild: false
+
+server:
+  connections:
+    codeberg-diday-website:
+      url: https://codeberg.org/
+      uuid: 9e145f54-2263-4fb1-8151-9efb205f88d1
+      token: {{ secret__forgejo_runner_codeberg_diday_website_token }}