diff --git a/services/forgejo-runner/default.nix b/services/forgejo-runner/default.nix
index c4ec77a..cce9d55 100644
--- a/services/forgejo-runner/default.nix
+++ b/services/forgejo-runner/default.nix
@@ -7,6 +7,7 @@ in
     enable = lib.mkEnableOption "Enable Forgejo service";
   };
   config = lib.mkIf cfg.enable {
+    age.secrets.forgejo-runner-token.file = ./secrets/forgejo-runner-token.age
     services.forgejo-actions-runner = {
       package = pkgs.forgejo-actions-runner;
       instances.default = {