Forgejo actions base image

Docker image with all dependencies installed, configured to be as close to GitHub actions as possible.

Built and tagged on flora-6 with:

docker build --tag node:20-bookworm .

Uses a ci user with passwordless sudo to enable nix single-user install.

See this GH issue for additional context.