diff --git a/hosts/vps1/services/git.nix b/hosts/vps1/services/git.nix
index 4e77e31..149471b 100644
--- a/hosts/vps1/services/git.nix
+++ b/hosts/vps1/services/git.nix
@@ -91,7 +91,8 @@ in
       };
 
       actions = {
-        ENABLED = false;
+        ENABLED = true;
+        DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
       };
       mailer = {
         ENABLED = true;
@@ -118,6 +119,27 @@ in
     };
   };
 
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.default = {
+      enable = true;
+      name = "mainrunner";
+      url = "https://${domain}";
+      # Obtaining the path to the runner token file may differ
+      tokenFile = /run/runnersecret;
+      labels = [
+        "ubuntu-latest:docker://node:16-bullseye"
+        "ubuntu-22.04:docker://node:16-bullseye"
+        #"ubuntu-20.04:docker://node:16-bullseye"
+        #"ubuntu-18.04:docker://node:16-buster"     
+        ## optionally provide native execution on the host:
+        "native:host"
+      ];
+    };
+  };
+  # TODO move to separate
+  virtualisation.docker.enable = true;
+
   sops.secrets."forgejo/email_password" = sops_opts;
 
   sops.secrets."forgejo/db_password" = sops_opts;