fix(ci): gitea workflows

.env.gitea-runner.example

@@ -0,0 +1,4 @@
+GITEA_INSTANCE_URL="https://git.example.com"
+GITEA_RUNNER_REGISTRATION_TOKEN="replace-with-runner-registration-token"
+GITEA_RUNNER_NAME="cms-runner"
+GITEA_RUNNER_LABELS="ubuntu-latest:docker://node:20-bookworm"

.gitea/workflows/ci-cd-theoretical.yml

@@ -17,7 +17,7 @@ env:
 jobs:
   quality:
     name: Lint Typecheck Tests
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -50,7 +50,7 @@ jobs:
 
   build_staging_images:
     name: Build Staging Images
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     needs: quality
     if: github.ref == 'refs/heads/staging'
     steps:
@@ -65,7 +65,7 @@ jobs:
 
   build_production_images:
     name: Build Production Images
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     needs: quality
     if: startsWith(github.ref, 'refs/tags/v')
     steps:
@@ -92,7 +92,7 @@ jobs:
 
   deploy_staging:
     name: Deploy Staging (Placeholder)
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     needs: build_staging_images
     if: github.ref == 'refs/heads/staging'
     steps:
@@ -103,7 +103,7 @@ jobs:
 
   deploy_production:
     name: Deploy Production (Placeholder)
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     needs: build_production_images
     if: startsWith(github.ref, 'refs/tags/v')
     steps:

.gitea/workflows/ci.yml

@@ -27,7 +27,7 @@ env:
 jobs:
   governance:
     name: Governance Checks
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -57,7 +57,7 @@ jobs:
   quality:
     name: Lint Typecheck Unit E2E
     needs: governance
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     services:
       postgres:
         image: postgres:16-alpine

.gitea/workflows/deploy.yml

@@ -20,7 +20,7 @@ on:
 jobs:
   deploy:
     name: Deploy Compose Stack
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     steps:
       - name: Resolve deployment target
         id: target

.gitea/workflows/release.yml

@@ -21,7 +21,7 @@ env:
 jobs:
   release:
     name: Build Push Changelog
-    runs-on: ubuntu-latest
+    runs-on: node22-bun
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.gitignore

@@ -24,6 +24,7 @@ test-results
 !.env.example
 !.env.staging.example
 !.env.production.example
+!.env.gitea-runner.example
 
 # prisma
 packages/db/prisma/dev.db*

README.md

@@ -119,12 +119,20 @@ Environment examples:
 
 - `.env.staging.example`
 - `.env.production.example`
+- `.env.gitea-runner.example`
 
 Notes:
 
 - `dev` remains your local non-docker Bun workflow.
 - Staging and production compose files are templates and still require real secrets, registry strategy, and deployment host wiring.
 
+Gitea Actions runner compose (self-hosted):
+
+```bash
+cp .env.gitea-runner.example .env.gitea-runner
+docker compose --env-file .env.gitea-runner -f docker-compose.gitea-runner.yml up -d
+```
+
 ## Changelog
 
 - Changelog file: `CHANGELOG.md`

docker-compose.gitea-runner.yml

@@ -0,0 +1,13 @@
+services:
+  gitea-runner:
+    image: gitea/act_runner:latest
+    container_name: cms-gitea-runner
+    restart: unless-stopped
+    environment:
+      GITEA_INSTANCE_URL: "${GITEA_INSTANCE_URL}"
+      GITEA_RUNNER_REGISTRATION_TOKEN: "${GITEA_RUNNER_REGISTRATION_TOKEN}"
+      GITEA_RUNNER_NAME: "${GITEA_RUNNER_NAME:-cms-runner}"
+      GITEA_RUNNER_LABELS: "${GITEA_RUNNER_LABELS:-ubuntu-latest:docker://node:20-bookworm}"
+    volumes:
+      - ./runner-data:/data
+      - /var/run/docker.sock:/var/run/docker.sock