diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 0000000..efdc13f
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,6 @@
+on: [push]
+jobs:
+  test:
+    runs-on: docker
+    steps:
+      - run: echo All good!
diff --git a/fili/services/forgejo.nix b/fili/services/forgejo.nix
index 538cf8c..a9422b1 100644
--- a/fili/services/forgejo.nix
+++ b/fili/services/forgejo.nix
@@ -73,4 +73,29 @@ in
     };
     mailerPasswordFile = config.sops.secrets.forgejo.path;
   };
+
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-runner;
+
+    instances.fili = {
+      enable = true;
+      name = "forgejo-runner-01";
+      token = "SutcrCJ3ULoE5LBj9Tm8zkvTRDEJCpbvpe7FEJHC";
+      url = "https://git.donsz.nl/";
+      labels = [
+        "node-22:docker://node:22-bookworm"
+        "nixos-latest:docker://nixos/nix"
+      ];
+      settings = {};
+    };
+  };
+
+  virtualisation.docker = {
+    daemon.settings = {
+      fixed-cidr-v6 = "fd00::/80";
+      ipv6 = true;
+    };
+  };
+  networking.firewall.trustedInterfaces = [ "br-+" ];
+
 }