diff --git a/fili/services/forgejo.nix b/fili/services/forgejo.nix
index c73f83a..a958a69 100644
--- a/fili/services/forgejo.nix
+++ b/fili/services/forgejo.nix
@@ -86,9 +86,7 @@ in
   };
 
   sops.secrets.forgejo-runner = {
-    sopsFile = ../../secrets/forgejo-runner.yaml;
-    format = "yaml";
-    key = "token";
+    sopsFile = ../../secrets/forgejo-runner.env;
   };
 
   services.gitea-actions-runner = {
diff --git a/secrets/forgejo-runner.env b/secrets/forgejo-runner.env
new file mode 100644
index 0000000..487e366
--- /dev/null
+++ b/secrets/forgejo-runner.env
@@ -0,0 +1,7 @@
+TOKEN=ENC[AES256_GCM,data:5WnyyafhDtizIzL4VjXYsMFxLTKikS4Lg6rNGoeVbMqXbquutotfcQ==,iv:2QknXqH8eHft9NHy6K17uv2WvSfvDE8HJsaBDfzUlws=,tag:jw0ffCsfhBNBy++W7cyJsg==,type:str]
+sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHaTZNTmxkMVVuWER0dTZN\nL3N0cDF2bHdpZUNLQWdJMHVjVk5LbnY1OGlVClpya1VhcHdRUW0yUW5CL21mSUJN\nMDU5cFZ1QUppaHZ2dXkwUjgrVFloS3cKLS0tIGNzRWUxSFlXUnR5eFhEQkNOWmRY\nV0dNWWRXVnJCU0duU2dGcWZRWFhMUm8K9dsrIrABcLRZ4pfduYrIaSiEVF+e2OA0\nOGY2eYWAxbgtqBXEX+vLn0eNtoAptpQi2WgOWwVPr1M1+07w7jExBA==\n-----END AGE ENCRYPTED FILE-----\n
+sops_age__list_0__map_recipient=age1ygkcl4ss92z5ptzt3w5g4n98qx2c4kagyssm96m5z4c7t299c5wszjchxw
+sops_lastmodified=2025-08-20T10:03:18Z
+sops_mac=ENC[AES256_GCM,data:Su4KI/pxc1hqNzEYoA1iPU2a5Fp9o/SEf2DW+hx0T5sNL8UvUFDELqYUoGvNNuz1/59ZR8cEmNWhao9euBoF0eVoUAVuS6ADKkX8EjXXJY8qR3M7aseweYxRYXADcWLTlrXsK4xWU6z+NKwmdvYzir9N1XEeR+w3fJLBBNPBnZI=,iv:z3e0kJuJsCLrBGDXZZiYERA48bdvxTxCsPnSdUFgtT8=,tag:rW0zsoEKnKRTpJN8pkJ4/A==,type:str]
+sops_unencrypted_suffix=_unencrypted
+sops_version=3.10.2
diff --git a/secrets/forgejo-runner.yaml b/secrets/forgejo-runner.yaml
deleted file mode 100644
index fb105c5..0000000
--- a/secrets/forgejo-runner.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-token: ENC[AES256_GCM,data:GUcut3EuuL3Q1ZUERprXbbtCeyTeVAT0Xf8m6yQmyXxdBqPENgz65A==,iv:GQ0jm0OmC5oHIO3KNLo2/MkmWQkFwKfy4w3F3ExXyf4=,tag:kQTh3tP3pxxMT1HAK+DumQ==,type:str]
-sops:
-    age:
-        - recipient: age1ygkcl4ss92z5ptzt3w5g4n98qx2c4kagyssm96m5z4c7t299c5wszjchxw
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZTEkxK1VPRTNJSE92YWpO
-            NFJ0cUxHZW9RekFJbEVjcEdFVUJvWWJERUUwClBvU3dhQ29mNXpTQlVFZDg1dHNT
-            NFptZ3ZXWlZvZ3psMWI1d0twQUg5aVUKLS0tIG9sU0NGSUY5ek1ZK1plZDJMcHlj
-            UG03bnlmb0xLNmRvVjczRnMwVUtMQkEK9wRT5YByZf1Fj6eYHmiHQJpbcH+al3yA
-            PC0SiWgl2yNWkonrzoa97ehL64ugdH+HfJboKNGvViiHdIElnHZwrQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-08-20T09:58:38Z"
-    mac: ENC[AES256_GCM,data:jJ/DE4gvDSUTAHFx0R5lLawH+PzoNRn48XyS3cRregwXuhfeKB6Zb5rb97JzMAIF0ovMb3+Tx2M4u1QS40tpOztC6oho+MdGEXooThASIbnPpwN5xrk56dejHXDzFpfYwc3J1PZT/YvoD1MQKqoK9RCVlqLOloGGnVXHRR/5Wso=,iv:EgbgESAcuEzuEABkBJDXOVBLyG4jbVvtaqI4OcLS2EM=,tag:JioeH2NqHuGuofPasCfuVg==,type:str]
-    unencrypted_suffix: _unencrypted
-    version: 3.10.2