From a83500e382230c18e6226e58abc958268f6fb790 Mon Sep 17 00:00:00 2001
From: chexit <chexit@duck.com>
Date: Sun, 19 Apr 2026 18:23:56 +0300
Subject: [PATCH] docs(yami): note that runner tokenFile must be env-file
 format (TOKEN=...)

---
 yami-dev-stack.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/yami-dev-stack.nix b/yami-dev-stack.nix
index 5986d48..f1777ad 100644
--- a/yami-dev-stack.nix
+++ b/yami-dev-stack.nix
@@ -143,7 +143,10 @@ in
     };
 
     # Runner uses DynamicUser, so there's no static gitea-runner user/group.
-    # The token file is read by the root-run pre-start, so root owns it.
+    # tokenFile is loaded via systemd EnvironmentFile, so the file MUST be in
+    # env-file format, not a raw token:
+    #     TOKEN=<paste-registration-token-from-gitea-ui>
+    # Get the token from Site Administration → Actions → Runners → Create new Runner.
     systemd.tmpfiles.rules = [
       "d /var/lib/gitea-runner 0700 root root -"
     ];