diff --git a/fili/services/forgejo.nix b/fili/services/forgejo.nix
index a958a69..c73f83a 100644
--- a/fili/services/forgejo.nix
+++ b/fili/services/forgejo.nix
@@ -86,7 +86,9 @@ in
   };
 
   sops.secrets.forgejo-runner = {
-    sopsFile = ../../secrets/forgejo-runner.env;
+    sopsFile = ../../secrets/forgejo-runner.yaml;
+    format = "yaml";
+    key = "token";
   };
 
   services.gitea-actions-runner = {
diff --git a/secrets/forgejo-runner.env b/secrets/forgejo-runner.env
deleted file mode 100644
index 487e366..0000000
--- a/secrets/forgejo-runner.env
+++ /dev/null
@@ -1,7 +0,0 @@
-TOKEN=ENC[AES256_GCM,data:5WnyyafhDtizIzL4VjXYsMFxLTKikS4Lg6rNGoeVbMqXbquutotfcQ==,iv:2QknXqH8eHft9NHy6K17uv2WvSfvDE8HJsaBDfzUlws=,tag:jw0ffCsfhBNBy++W7cyJsg==,type:str]
-sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaTZNTmxkMVVuWER0dTZN\nL3N0cDF2bHdpZUNLQWdJMHVjVk5LbnY1OGlVClpya1VhcHdRUW0yUW5CL21mSUJN\nMDU5cFZ1QUppaHZ2dXkwUjgrVFloS3cKLS0tIGNzRWUxSFlXUnR5eFhEQkNOWmRY\nV0dNWWRXVnJCU0duU2dGcWZRWFhMUm8K9dsrIrABcLRZ4pfduYrIaSiEVF+e2OA0\nOGY2eYWAxbgtqBXEX+vLn0eNtoAptpQi2WgOWwVPr1M1+07w7jExBA==\n-----END AGE ENCRYPTED FILE-----\n
-sops_age__list_0__map_recipient=age1ygkcl4ss92z5ptzt3w5g4n98qx2c4kagyssm96m5z4c7t299c5wszjchxw
-sops_lastmodified=2025-08-20T10:03:18Z
-sops_mac=ENC[AES256_GCM,data:Su4KI/pxc1hqNzEYoA1iPU2a5Fp9o/SEf2DW+hx0T5sNL8UvUFDELqYUoGvNNuz1/59ZR8cEmNWhao9euBoF0eVoUAVuS6ADKkX8EjXXJY8qR3M7aseweYxRYXADcWLTlrXsK4xWU6z+NKwmdvYzir9N1XEeR+w3fJLBBNPBnZI=,iv:z3e0kJuJsCLrBGDXZZiYERA48bdvxTxCsPnSdUFgtT8=,tag:rW0zsoEKnKRTpJN8pkJ4/A==,type:str]
-sops_unencrypted_suffix=_unencrypted
-sops_version=3.10.2
diff --git a/secrets/forgejo-runner.yaml b/secrets/forgejo-runner.yaml
new file mode 100644
index 0000000..fb105c5
--- /dev/null
+++ b/secrets/forgejo-runner.yaml
@@ -0,0 +1,16 @@
+token: ENC[AES256_GCM,data:GUcut3EuuL3Q1ZUERprXbbtCeyTeVAT0Xf8m6yQmyXxdBqPENgz65A==,iv:GQ0jm0OmC5oHIO3KNLo2/MkmWQkFwKfy4w3F3ExXyf4=,tag:kQTh3tP3pxxMT1HAK+DumQ==,type:str]
+sops:
+    age:
+        - recipient: age1ygkcl4ss92z5ptzt3w5g4n98qx2c4kagyssm96m5z4c7t299c5wszjchxw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTEkxK1VPRTNJSE92YWpO
+            NFJ0cUxHZW9RekFJbEVjcEdFVUJvWWJERUUwClBvU3dhQ29mNXpTQlVFZDg1dHNT
+            NFptZ3ZXWlZvZ3psMWI1d0twQUg5aVUKLS0tIG9sU0NGSUY5ek1ZK1plZDJMcHlj
+            UG03bnlmb0xLNmRvVjczRnMwVUtMQkEK9wRT5YByZf1Fj6eYHmiHQJpbcH+al3yA
+            PC0SiWgl2yNWkonrzoa97ehL64ugdH+HfJboKNGvViiHdIElnHZwrQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-08-20T09:58:38Z"
+    mac: ENC[AES256_GCM,data:jJ/DE4gvDSUTAHFx0R5lLawH+PzoNRn48XyS3cRregwXuhfeKB6Zb5rb97JzMAIF0ovMb3+Tx2M4u1QS40tpOztC6oho+MdGEXooThASIbnPpwN5xrk56dejHXDzFpfYwc3J1PZT/YvoD1MQKqoK9RCVlqLOloGGnVXHRR/5Wso=,iv:EgbgESAcuEzuEABkBJDXOVBLyG4jbVvtaqI4OcLS2EM=,tag:JioeH2NqHuGuofPasCfuVg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2