diff --git a/docker-compose.yml b/docker-compose.yml
index 15688f4..8a8f0db 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,4 +1,8 @@
 ---
+secrets:
+  gitea_runner_token:
+    file: secrets/gitea_runner_token.txt
+
 configs:
   caddyfile:
     content: |
@@ -559,12 +563,11 @@ services:
     environment:
       - GITEA_INSTANCE_URL=https://git.${DOMAIN}
       - CONFIG_FILE=/config/config.yaml
-      # When using Docker Secrets, it's also possible to use
-      # GITEA_RUNNER_REGISTRATION_TOKEN_FILE to pass the location.
-      # The env var takes precedence
-      - GITEA_RUNNER_REGISTRATION_TOKEN=92U7bIiADtqkILwjjj9rffjz8vyNp0zo7uaOgrIG
+      - GITEA_RUNNER_REGISTRATION_TOKEN_FILE=/run/secrets/gitea_runner_token
       - GITEA_RUNNER_LABELS="ubuntu-latest:docker://catthehacker/ubuntu:act-latest"
       - GITEA_RUNNER_NAME="NAS_CONTAINER"
+    secrets:
+      - gitea_runner_token
     restart: unless-stopped
 
   linkace:
diff --git a/secrets/gitea_runner_token.txt b/secrets/gitea_runner_token.txt
new file mode 100644
index 0000000..c8e1111
Binary files /dev/null and b/secrets/gitea_runner_token.txt differ