modules/ci-runner/default.nix

@@ -10,7 +10,7 @@ in
   };
 
   config = mkIf cfg.enable {
-    systemd.services.ci-runner = {
+    systemd.user.services.ci-runner = {
       enable = true;
 
       description = "CI runner for the PubSolarOS repository that can run test VM instances with KVM.";
@@ -20,6 +20,8 @@ in
         Restart = "always";
       };
 
+      path = "${pkgs.git}/bin:${pkgs.nix}/bin:${pkgs.libvirt}/bin";
+
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" "libvirtd.service" ];
 
@@ -29,7 +31,7 @@ in
     age.secrets."drone-runner-exec-config" = {
       file = "${self}/secrets/drone-runner-exec-config";
       mode = "700";
-      owner = "root";
+      owner = psCfg.user.name;
     };
   };
 }