diff --git a/nixos/common/services/forgejo-runner.nix b/nixos/common/services/forgejo-runner.nix
index 43a39e9a..10b7bcdf 100644
--- a/nixos/common/services/forgejo-runner.nix
+++ b/nixos/common/services/forgejo-runner.nix
@@ -2,12 +2,14 @@
 
     # Set up the secret for the password:
     sops.secrets."services/forgejo_token" = {
-        owner = "gitea-runner";
+        owner = "root";
+        mode = "0444"; # gitea-actions-runner uses "DynamicUser"
         sopsFile = ../../../secrets/secrets.yaml;
+        restartUnits = [ "gitea-actions-runner-${hostname}.service" ];
     };
 
     services.gitea-actions-runner = {
-        package = pkgs.gitea-actions-runner;
+        package = pkgs.forgejo-actions-runner;
         instances."${hostname}" = {
             enable = true;
             name = "${hostname}";