fix(debian-runners): Use new tokens

machines/nixos/storage01/forgejo-runners.nix

@@ -1,7 +1,7 @@
 # SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
 #
 # SPDX-License-Identifier: EUPL-1.2
-
+{ config, ... }:
 let
   url = "https://git.dgnum.eu";
 
@@ -9,7 +9,7 @@ let
     {
       labels,
       name,
-      token,
+      tokenFile,
     }:
     {
       enable = true;
@@ -17,7 +17,7 @@ let
       inherit
         name
         labels
-        token
+        tokenFile
         url
         ;
 
@@ -31,14 +31,14 @@ in
 {
   services.gitea-actions-runner.instances = builtins.mapAttrs (_: mkRunner) {
     runner01 = {
-      token = "qT9nZXKgLcb3fWOj7VTj3S58raiCWwF0weuIIKlY";
+      tokenFile = config.age.secrets."forgejo_runners-public-token_file".path;
       name = "storage01 [debian]";
 
       labels = [ "debian-latest:docker://node:20-bookworm" ];
     };
 
     runner02 = {
-      token = "m0rUDBxxkMb6xLTmPFwIieHswJFROqPFByPlT3V9";
+      tokenFile = config.age.secrets."forgejo_runners-public-token_file".path;
       name = "storage01 [debian]";
 
       labels = [ "debian-latest:docker://node:20-bookworm" ];

machines/nixos/storage01/secrets/forgejo_runners-public-token_file

@@ -0,0 +1,29 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA x//po/qZhYyh3cQDh3kZc2vlBKChfHjdEJT46M+kAHg
+bm5BEkrhBGRx5CS8rGTbD5lwIYzOZBqMs1x9XCTTiA8
+-> ssh-ed25519 QlRB9Q cNXMP78kQIRWuGLCRZvxsgGUJQo8rhNFBx9ECbn1AFg
+f9AGnlUjkYz+hLXTNlpgLVCuyEgi/8A/v2j3F8vpnd4
+-> ssh-ed25519 r+nK/Q /jNcLJXFQOynWBpaquFJaZ9sMGwfTWoejCW79SKnF1M
+ipp6DDUh5ybA1tYzk5spzRYS9qyp584G3kP0z3mwlyg
+-> ssh-rsa krWCLQ
+EFGq7uLvYtvovHxdFcZCYae5iAhqcoJkvewlMLdVVAzDFVfFrhD5kbXQfvI0YWgU
+Quw7uT+2PCq8OR5Ov+HMdADiGPMhDzEq3zHS1cBGjSVGkc8RcheOl5tal1fni/JB
+yGvjy4ifVKpAuMzDif1+OMyGeLFVpaG6i71YygtDsVqlIDTAOlah8wcpoPnNV37u
+pAG0aCCEeOVT4W+dcdS932DL1nTzSLR5kzFcsWAW5Obf8nd8mS+/isvACEKyHAYx
+sftuimGbxT9X58v5OLUvviR6MmXeqt/Pqfu2hPfkieEOSiRL773DwRoj7u0xfYhT
+7UgGd39Ny0u0WA0muUMMng
+-> ssh-ed25519 /vwQcQ kY8b1WON9Lyrq+QQeQMpgkEKA14UWZ/MSp+w1+77+mg
++CGGwM4xPJ/Dsp8qBgsqLz4bFxoqu+W2M/yedNVjuBI
+-> ssh-ed25519 0R97PA RpLDkquGnqGrr1/zhNqhAP+vLOak0w/9qGiTTXWfQHs
+uFOABOgQO0/rX1ogQ09VTT3l1nDpPEgaTp4DPMEuGAw
+-> ssh-ed25519 JGx7Ng wlRLXaWdnrtvFV/VhJTejQhD6tJSRq92XTWnvWTWKxQ
+P8ilCmvYnO4+RXmOhKHg4a3yo9GNoQ8w7w52ppOFlk4
+-> ssh-ed25519 bUjjig u4mBSWnpZo/rH2AHCs4wwrqhSeFoWSBZmyiAU/9l7i8
+j2KJrwZl/ucOsKp7+k9RUByffHNF0ympd7gzzzlZ7rQ
+-> ssh-ed25519 rHotTw sCGiWCC8SP7q/X4CEArVxQl/IeBpZGpdXmEsdifK/GM
++LHz8AYYVNJVluvYKkrnMSH+AowVzuX6dzErjMdAgKA
+-> G~O-grease 13SBi eweV} >yo
+DD+zGoVT+x1FZsUpwdNqJ42yL9oC9ZhgEEZJFFXw7pxmu6KEGrBeZNQ/QR8vVmW8
+3wTV+07yzgf2Uw6xsCObF4SXGqo
+--- xMG6HjO5YoNjFUfUwoJ/qgk7zhAYhEoqOaCL/pdr0Jc
+űÂÎœ÷ë/"ú?Ô!±ˆ8
['Ü´¹Õ¹Nßå7­UDàX,íy$ç^TÓƒ£ÖM–»Ö><02>À¬›ÿ™ +<2B>Å»W—\§Y¼v

machines/nixos/storage01/secrets/secrets.nix

@@ -8,6 +8,7 @@
     # List of secrets for storage01
     "bupstash-put_key"
     "forgejo-mailer_password_file"
+    "forgejo_runners-public-token_file"
     "influxdb2-grafana_token_file"
     "influxdb2-initial_password_file"
     "influxdb2-initial_token_file"