{
  virtualisation = {
    containers.enable = true;
    podman.enable = true;
    oci-containers.containers = {
      runner = {
        image = "code.forgejo.org/forgejo/runner:3.4.1";
        dependsOn = [ "docker_dind" ];
        environment.DOCKER_HOST = "tcp://docker_dind:2375";
        volumes = [ "forgejo-runner:/data" ];
        cmd = [
          "forgejo-runner"
          "daemon"
        ];
        extraOptions = [
          "--pull=newer"
          "--network=www"
        ];
      };
    };
  };
}