diff --git a/hosts/fw.cloonar.com/modules/gitea.nix b/hosts/fw.cloonar.com/modules/gitea.nix
index c8ab9e4..81e0f1c 100644
--- a/hosts/fw.cloonar.com/modules/gitea.nix
+++ b/hosts/fw.cloonar.com/modules/gitea.nix
@@ -137,41 +137,4 @@ in
       };
     };
   };
-
-  # containers.git-runner = {
-  #   autoStart = true;
-  #   ephemeral = false; # because of ssh key
-  #   macvlans = [ "vserver" ];
-  #   bindMounts = {
-  #     "/run/secrets/gitea-runner-token" = {
-  #       hostPath = config.sops.secrets.gitea-runner-token.path;
-  #       isReadOnly = true;
-  #     };
-  #     "/run/podman/podman.sock" = {
-  #       hostPath = "/run/podman/podman.sock";
-  #       isReadOnly = false;
-  #     };
-  #   };
-  #   config = { lib, config, pkgs, ... }: {
-  #     networking = {
-  #       hostName = "git-runner";
-  #       nameservers = [ "10.42.97.10" ];
-  #       interfaces.mv-vserver = {
-  #         useDHCP = true;
-  #       };
-  #       firewall = {
-  #         enable = true;
-  #       };
-  #     };
-  #
-  #     virtualisation.podman.enable = true;
-  #
-  #
-  #     users.groups.podman.gid = cids.gids.podman;
-  #     users.users.gitea-runner = runner-user;
-  #     users.groups.gitea-runner = runner-group;
-  #
-  #     system.stateVersion = "23.05";
-  #   };
-  # };
 }
diff --git a/hosts/fw.cloonar.com/secrets.yaml b/hosts/fw.cloonar.com/secrets.yaml
index b1c13f4..d0b5ce0 100644
--- a/hosts/fw.cloonar.com/secrets.yaml
+++ b/hosts/fw.cloonar.com/secrets.yaml
@@ -5,7 +5,7 @@ wg_cloonar_key: ENC[AES256_GCM,data:Dtp6I5J0jU5LLVwEFU4DFCpUngPRmFMebGXnk2oSwsKt
 wg_epicenter_works_key: ENC[AES256_GCM,data:LeLjfwfaz+loWyHYRgIMIPzHzlOnhl9tluKcQFgdes6r+deft1JfnUzDuF0=,iv:DKrc3I+U2hWDH8nnc8ZQeaVtA1eVXu7SXdTn1fxHoH4=,tag:V0PL0GrL2NEPVslAZa801A==,type:str]
 wg_epicenter_works_psk: ENC[AES256_GCM,data:Den3NDWdP013Or6/2Vll1igUahuRSNW4hu+nDa5vkr93bbveQTaWFT4TD4U=,iv:r3UsD3+3lUIP2X3Grti7wpXTQBXtu1/MdrycEmpZfsI=,tag:ghbAcxmjGVOe9jCZsmFzjA==,type:str]
 wg_ghetto_at_key: ENC[AES256_GCM,data:OIHmoy3SpIi9aefZnZ1PzpyHbEso18ceoTULf2eQkx1rJbaxC6PD1lma7eQ=,iv:u0eFjHHOBzPTmBvBEQsYY5flcBayiAQKd6e7RyiPwJI=,tag:731C9wvv8bA5fuuQq+weVQ==,type:str]
-gitea-runner-token: ENC[AES256_GCM,data:O6Z422JN17ze8hczMiEl6kGoUcs+O9383Akq33IMbq7bhh/uExEpmy6nU3FMJGM=,iv:4I1+2iEN8AoyiogpHCHJq8hkxC/lz5GtNBr2HixTq+Y=,tag:FdTDXeHEh6s7rl0cwqOu5w==,type:str]
+gitea-runner-token: ENC[AES256_GCM,data:Nd0vsnuJficsdZaqeBZXa9vD7PLMdDtV9sMX0TxUSEMNU7Reu3HLCWuvP0easPU=,iv:4mrfQc1tobg/QiExUuWST6iU9TdNwiS1BMmOnQqCFZU=,tag:85aRoD3IkRq3mcoPdLKaBQ==,type:str]
 drone: ENC[AES256_GCM,data:S8WTZqGHfcdpSojavZ87GdE5dagcTAdHBVQEbHHgnB4V7aczS6c5QdEJxK920Pjpf6o54OOQYniVsPiiXSxwjExDKPzhs/DG2hfigmf8RgfkP+3tF2W0KiPmV2jxog8w226ZKnI+hSBs8tuIfJBhrpY7Y/YNmTPfq+cnnLS8ibYqytcpzoogI9I8THzHCu3r+yejoGSyTMs9L4gPhOjz5aK4UV6V,iv:zqN/aSBI3xGGNDnpHPGyQnQP2YZOGUk6dAGtON/QlHU=,tag:o9YFDKAB5uR9lPmChyxB8g==,type:str]
 home-assistant-ldap: ENC[AES256_GCM,data:uZEPbSnkgQYSd8ev6FD8TRHWWr+vusadtMcvP7KKL2AZAV0h1hga5fODN6I5u0DNL9hq2pNM+FwU0E/svWLRww==,iv:IhmUgSu34NaAY+kUZehx40uymydUYYAyte1aGqQ33/8=,tag:BKFCJPr7Vz4EG78ry/ZD7g==,type:str]
 home-assistant-secrets.yaml: ENC[AES256_GCM,data:8LH3rrbkpRIFuKZmXe7EHcXPlkzfbdaxX7ssWjIUJ0FQ2QbMUOFsrxVt4diMVHJuaDCoC5gXIwWYDXw4yQj+4Pdf0cwk2MiXj2S9O7GxuOQzP4V1Ab4HeLJOXbGP4cigzNak5epbBiyJY13mVPVgjxX2M4GkuB2TXCOZ5GpvHHv0IvNcc6ymov/XkpJh7MOkyKw45jrYjiV/8dSTORhcWms5J/YgRpSQ/XijWkzucsisNyYk6mKYSq5O4xWFNEF1YC5FFr+rX7xzsbAp0niG3r1d+qcxYHOe0KPB0auxdxif3wQELAp/tosm4l+H+llw3t6STdFVUeBHC+naAwr0QTYB2a7yWLvb6Eh9CYQ7Z3qS/CvvVKs3sB0djRU42FZ9O4c2XcMllP0f3nVaF+DnLpaxgCdLoGPBhYdyTniBij+JudvGZvpWZUFLRlx49zC07RMRG4k+xMA4bAJkiLb+T+b30ur7N+EUgCOyp2FROc1ngCiJqr+cYbnWN1wqougm+pM+GxNZNwakiw1RFJPcOzpjtuwYp/gEKOC+Sz3Qkl4VpYxj7t7fikV0s5r+HzuNFa7gFWpApeRt6YuffQRWhlPVlCOkrQUhRl3YPG9khQ==,iv:r5Vb1ucVrMD0xZOuVnyRJ4El5sCBru/4nOV74pz+tA0=,tag:SwrBmA++GWVzf/0lWSuCpg==,type:str]
@@ -33,8 +33,8 @@ sops:
             Tlo3NHBlMkJEaXNOZkxSKytGSDNEMWcKquNuAzbPWwAjqc65BcAA/DMltFjC6Ayb
             CKmJ7kaYFFUAIuBXhksvlH2b7vRZLT1QlwqUcRIRjxe+mZnsMIqE7w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-12-06T20:26:10Z"
-    mac: ENC[AES256_GCM,data:DuW6KQQkURy2D438iOwiNuNunFaAN37F4UBceTy0K7CGOm01sejMZ+mN4D1cML8WQUTK4f2IDDeddWEwkSoRMiOyfsj0esft3pNE0uPRIB+Ktc25AQr1Vhv0sfR9Ie37TRQXab5q0sDR4mmC1nhIExBUcTrH5kJz0DgaTpUwiyE=,iv:EVMKnbOeayh5D8TSJpSWhirfZLh7vDEmK7+RpqIC5Oc=,tag:l9QEWplrZvRUIAf8diZrBA==,type:str]
+    lastmodified: "2023-12-07T23:58:35Z"
+    mac: ENC[AES256_GCM,data:jhcwsmXWQ7DgK2IPo90zJh7v7XFIe+NHvNUZtLW49oZNC37AA3NXissnVB9bhTIZw/905iGjpuy+CYNAI+21YkWIJQ5ESDTWhdUpXsDOlv+gKcODtW8/VKH0AUsvo1n7EBOGWcI5XliNvFza+59aMW5RKyu7xBX39J+2TOk2gZM=,iv:jLF7Z3JezWshKNGn7juxxsSJyKPcy4WaPMupDGENNmw=,tag:F6pjhdzWMWI048wow2ThBg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3