{ ... }:

{
  services.github-runner = {
    enable = true;
    url = "https://github.com/ropfuscator";
    tokenFile = "/secrets/github-runner/token";
    replace = true;
  };

  nix.extraOptions = ''
    tarball-ttl = 0
    access-tokens = github.com=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
  '';
}