try forgejo

.forgejo/workflows/update.yml

@@ -2,26 +2,22 @@ name: Updater
 
 on:
   schedule:
-  - cron: '0 7 * * *'
+    - cron: "0 7 * * *"
   workflow_dispatch: {}
 
-jobs:   
+jobs:
   update_flake:
-    runs-on: ubuntu-node
+    runs-on: nix-amd64
     steps:
-    - name: Set up git
-      run: |
-        git config --global user.email "actions[bot]"
-        git config --global user.name "actions[bot]"
-        git config --global http.sslVerify "false"
-    - name: Checkout repository
-      uses: actions/checkout@v4
-    - name: Install Nix
-      uses: https://github.com/DeterminateSystems/nix-installer-action@main
-    - name: Update flake.lock
-      uses: https://github.com/DeterminateSystems/update-flake-lock@main
-      with:
-        pr-title: "Update flake.lock" # Title of PR to be created
-        pr-labels: |                  # Labels to be set on the PR
-          dependencies
-          automated
+      - uses: actions/checkout@v4
+        with:
+          ref: master
+      - name: Update dependencies
+        run: |
+          nix flake update
+      - uses: https://github.com/stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: "[automation] Update flake"
+          commit_user_name: Actions Bot
+          commit_user_email: jmarkin+actions-bot@jmarkin.ru
+          commit_author: Actions Bot <jmarkin+actions-bot@jmarkin.ru>

nixos/modules/forgejo-runner.nix

@@ -20,10 +20,21 @@ in
       enable = true;
       url = forgejoUrl;
 
+      hostPackages = with pkgs; [
+        bash
+        coreutils
+        curl
+        gawk
+        gitMinimal
+        gnused
+        nodejs
+        wget
+      ];
+
       tokenFile = config.age.secrets.forgejo.path;
 
       labels = [
-        "nixos-latest:docker://nixos/nix"
+        "nix-amd64:docker://nixos/nix"
       ];
 
     };