gitea: move runner token to a secret

docker-compose.yml

@@ -1,4 +1,8 @@
 ---
+secrets:
+  gitea_runner_token:
+    file: secrets/gitea_runner_token.txt
+
 configs:
   caddyfile:
     content: |
@@ -559,12 +563,11 @@ services:
     environment:
       - GITEA_INSTANCE_URL=https://git.${DOMAIN}
       - CONFIG_FILE=/config/config.yaml
-      # When using Docker Secrets, it's also possible to use
+      - GITEA_RUNNER_REGISTRATION_TOKEN_FILE=/run/secrets/gitea_runner_token
-      # GITEA_RUNNER_REGISTRATION_TOKEN_FILE to pass the location.
-      # The env var takes precedence
-      - GITEA_RUNNER_REGISTRATION_TOKEN=92U7bIiADtqkILwjjj9rffjz8vyNp0zo7uaOgrIG
       - GITEA_RUNNER_LABELS="ubuntu-latest:docker://catthehacker/ubuntu:act-latest"
       - GITEA_RUNNER_NAME="NAS_CONTAINER"
+    secrets:
+      - gitea_runner_token
     restart: unless-stopped
 
   linkace: