diff --git a/config/services/forgejo.nix b/config/services/forgejo.nix
index f4149a3..d09e7c1 100644
--- a/config/services/forgejo.nix
+++ b/config/services/forgejo.nix
@@ -20,9 +20,6 @@ in
     "services/forgejo/password-database".owner = config.services.forgejo.user;
   };
 
-  # forgejo ssh
-  networking.firewall.allowedTCPPorts = [ 22 ];
-
   # indexer
   services.elasticsearch.enable = true;
 
@@ -119,7 +116,11 @@ in
     };
   };
 
-  virtualisation.podman.enable = true;
+  virtualisation.podman = {
+    enable = true;
+    dockerSocket.enable = true;
+    defaultNetwork.settings.dns_enabled = true;
+  };
   services.gitea-actions-runner = {
     package = pkgs.unstable.forgejo-runner;
     instances.main = {
@@ -128,10 +129,6 @@ in
       url = config.services.forgejo.settings.server.ROOT_URL;
       tokenFile = config.age.secrets."services/forgejo/runner-token".path;
       labels = [ "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest" ];
-      settings.container = {
-        network = "host";
-        options = "--add-host=forgejo.winston.sh:host-gateway";
-      };
     };
   };