{ ... }: { services.github-runner = { enable = true; url = "https://github.com/ropfuscator"; tokenFile = "/secrets/github-runner/token"; replace = true; }; nix.extraOptions = '' tarball-ttl = 0 access-tokens = github.com=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 ''; }