{
  config,
  pkgs,
  flake,
  ...
}: {
  age.secrets.drone_exec_runner_config = {
    file = "${flake.self}/secrets/chonk_drone_exec_runner_config.age";
    owner = "999";
  };

  pub-solar.docker-ci-runner = {
    enable = true;
    enableKvm = true;
    nixCacheLocation = "/srv/drone-nix-cache/nix";

    runnerEnvironment = {
      DRONE_RUNNER_CAPACITY = "10";
      DRONE_RUNNER_LABELS = "hosttype:baremetal";
    };

    runnerVarsFile = "/run/agenix/drone_exec_runner_config";
  };
}