From e55c9f06ede28abebb491528f700fc998a8e515a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Thu, 13 Jul 2023 14:17:43 +0200
Subject: [PATCH] gitea-runner: dont leak token

---
 modules/web01/gitea/actions-runner.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/web01/gitea/actions-runner.nix b/modules/web01/gitea/actions-runner.nix
index edf278a..8087d50 100644
--- a/modules/web01/gitea/actions-runner.nix
+++ b/modules/web01/gitea/actions-runner.nix
@@ -69,6 +69,8 @@
     settings = {
       runner.envs = {
         HOME = "/var/lib/gitea-runner/nix";
+        # unset the token so it doesn't leak into the runner
+        TOKEN = "";
       };
     };
   };