diff --git a/modules/forgejo/actions.nix b/modules/forgejo/actions.nix
new file mode 100644
index 0000000..84caf32
--- /dev/null
+++ b/modules/forgejo/actions.nix
@@ -0,0 +1,19 @@
+{ pkgs, ... }:
+{
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances."quitte" = {
+      enable = true;
+      labels = [
+        # provide a debian base with nodejs for actions
+        "debian-latest:docker://node:18-bullseye"
+        # fake the ubuntu name, because node provides no ubuntu builds
+        "ubuntu-latest:docker://node:18-bullseye"
+        # provide native execution on the host
+        "native:host"
+      ];
+      #TODO get a token from git.ifsr.de and use it
+      # tokenfile = /"dev/null";
+    };
+  };
+}
diff --git a/modules/forgejo/default.nix b/modules/forgejo/default.nix
index 083e190..2a69af5 100644
--- a/modules/forgejo/default.nix
+++ b/modules/forgejo/default.nix
@@ -4,9 +4,9 @@ let
   gitUser = "git";
 in
 {
-  # imports = [
-  #   ./actions.nix
-  # ];
+  imports = [
+    ./actions.nix
+  ];
   sops.secrets.gitea_ldap_search = {
     key = "portunus/search-password";
     owner = config.services.forgejo.user;