diff --git a/hosts/rico2/services/apps/forgejo-actions-runner.nix b/hosts/rico2/services/apps/forgejo-actions-runner.nix
index 7bcb698..dda954c 100644
--- a/hosts/rico2/services/apps/forgejo-actions-runner.nix
+++ b/hosts/rico2/services/apps/forgejo-actions-runner.nix
@@ -13,6 +13,7 @@
         enable = true;
         name = "runner-arm64";
         labels = [
+          "docker:docker://ubuntu:latest"
           "debian-stable:docker://debian:stable"
           "ubuntu:docker://ubuntu:latest"
           "alpine:docker://alpine:latest"
diff --git a/hosts/wynne/services/apps/forgejo.nix b/hosts/wynne/services/apps/forgejo.nix
index 0136147..8523395 100644
--- a/hosts/wynne/services/apps/forgejo.nix
+++ b/hosts/wynne/services/apps/forgejo.nix
@@ -19,6 +19,7 @@ in
           enable = true;
           name = "runner-x86_64";
           labels = [
+            "docker:docker://ubuntu:latest"
             "debian-stable:docker://debian:stable"
             "ubuntu:docker://ubuntu:latest"
             "alpine:docker://alpine:latest"
diff --git a/secrets.yaml b/secrets.yaml
index 142bba3..4163fd1 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -25,7 +25,7 @@ matrix:
 caddy:
     env_file: ENC[AES256_GCM,data:PKtILX7o0D3rj78JXIXad9UcQz0ZiihXK1nY/kb08fh3i54hYrFyJyGt04b9mAufxTnhDV4=,iv:I/EtxopCFmRxgsGJIcFDufTiM1JyPPoIQkgKIDiCP24=,tag:5QlGMp839p9RYKB09tr61A==,type:str]
 forgejo:
-    runner_registration_token_file: ENC[AES256_GCM,data:1ycTh6FxUXGyreaJThZpYfwdy8wQj9cN3znIGmhgr04Pvmew7wxHJZ27i9Xp8g==,iv:8O5I8oQW10dgLOXJOvv3bMis6tHPxgxrie+5AmnHy38=,tag:CCYJLXEeSLVoTgTc2U48Zw==,type:str]
+    runner_registration_token_file: ENC[AES256_GCM,data:LOSekKJdvqWklQbcuXwwmoCkfwE9Vm+QTj+KfC/02zL/SG64mESO+TrPtguMRQ==,iv:8rzddQomNqAMhEgxBPLD3nflVYu97vmGg+ZGcg2VDxE=,tag:labXqAQN3r0O4eVOL56+nQ==,type:str]
 proton:
     layne: ENC[AES256_GCM,data:wAY2uoxjM1ubHzvwBfsgQzx+OLsno4Q/gP5XPiDPHwWy3IbmU14EhSH942mdjixRlHK2/T3l3NYqFSOm//8Ri9+GyfmJBcIKY/A8vgui0DbkGOb5+h7AKDoCwyUrredtCtFSWk5Hahl19BnJtoLEzmOjbF6su7P2PgAdpxlkWiiyR3ZVSC+PD/2KjdkgNSEXV8V7fxTSaiMqAYXiIqe33Kx5gKIVHPuHf8qrnKYQ92q2BUolpXpcg24FlbavjgmkTI3wCw9V/o/zo5lJnCzi8TSdVelJ5fOKDUA+8FemJcquYQ==,iv:dsbKPzNUAYnH1yaflxEAoKaTj+QtflkMdqAQqQQi418=,tag:jsSTKjmk6nTUfUAxcTsMtA==,type:str]
 sops:
@@ -97,8 +97,8 @@ sops:
             YzdpTitkMHh6VUFtV2FodVF6OWJkTU0KBjC+esgHZ8hTWXwZ+cy4++jLP+gsruHM
             fmRDhvQu0MNHkjQ8q4VmwRVl10uc8CyTDFTuyDoAhvmnzXHtrg1wpA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-10-29T14:26:09Z"
-    mac: ENC[AES256_GCM,data:IXvQiON8db7pP+Bxsu1EkjxbM7keSXco02my0awn0fhU9/MRYWsCp44Fu6+9jXjDPdfK7duWTJv+o0+K+sMxb6p4CtCDqIhy7h5W3og+sltiVN78Qxi5tuXvgiP/maZtJWnfT96jiMftAfxMha9pMpdeJ4NMPF7snHAgc6dRzVg=,iv:vMkSiF8jzNFeLEsbM4ctkB1DXXMwbb7vZEJr4+Buhkw=,tag:TV1vAQRMcdNhTkL1Chdf1Q==,type:str]
+    lastmodified: "2024-10-29T17:13:32Z"
+    mac: ENC[AES256_GCM,data:JCE044Syy2kuArn+kpsdGIS4clU2LJh8WtwNe+uimam6uJmBpx9EgwSQMCUKjPs1SsvzR8tOwSru705nax3pwZLqvSwFe98JaeIcp7eryVXGnJ1w5OldeYmCXttElnx7wg2w/LYRCcw6OPdA+zzhuMIxQn6OtQ0iB9a0YPh1H6E=,iv:n02q5fS3GFl1xvw0AyvaJtE+dtEekC7JAd5ctfZ75Aw=,tag:DPImMZOZKWwxRIbo2LJP2w==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.1