diff --git a/gitea-runner/deployment.yaml b/gitea-runner/deployment.yaml
index da46012..fdf041a 100644
--- a/gitea-runner/deployment.yaml
+++ b/gitea-runner/deployment.yaml
@@ -16,16 +16,15 @@ spec:
     spec:
       restartPolicy: Always
       volumes:
+      - name: docker-certs
+        emptyDir: {}
       - name: runner-data
         persistentVolumeClaim:
           claimName: gitea-runner-pvc
-      securityContext:
-        fsGroup: 1000
       containers:
       - name: runner
-        image: gitea/act_runner:nightly-dind-rootless
-        imagePullPolicy: Always
-        # command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- /opt/act/run.sh"]
+        image: gitea/act_runner:nightly
+        command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- run.sh"]
         env:
         - name: DOCKER_HOST
           value: tcp://localhost:2376
@@ -38,14 +37,20 @@ spec:
         - name: GITEA_RUNNER_REGISTRATION_TOKEN
           valueFrom:
             secretKeyRef:
-              name: gitea-runner-token
-              key: registration-token
+              name: runner-secret
+              key: token
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs
+        - name: runner-data
+          mountPath: /data
+      - name: daemon
+        image: docker:23.0.6-dind
+        env:
+        - name: DOCKER_TLS_CERTDIR
+          value: /certs
         securityContext:
           privileged: true
         volumeMounts:
-        - name: runner-data
-          mountPath: /data
-        resources:
-          limits:
-            memory: "1Gi"
-            cpu: "1000m"
\ No newline at end of file
+        - name: docker-certs
+          mountPath: /certs
\ No newline at end of file