diff --git a/hosts/flora-6/apps/forgejo-actions-runner.nix b/hosts/flora-6/apps/forgejo-actions-runner.nix
index 28897ef2..c7d8283f 100644
--- a/hosts/flora-6/apps/forgejo-actions-runner.nix
+++ b/hosts/flora-6/apps/forgejo-actions-runner.nix
@@ -26,9 +26,9 @@
       tokenFile = config.age.secrets.forgejo-actions-runner-token.path;
       labels = [
         # provide a debian 12 bookworm base with Node.js for actions
-        "debian-latest:docker://node:20-bookworm"
+        "debian-latest:docker://git.pub.solar/pub-solar/actions-base-image:20-bookworm"
         # fake the ubuntu name, commonly used in actions examples
-        "ubuntu-latest:docker://node:20-bookworm"
+        "ubuntu-latest:docker://git.pub.solar/pub-solar/actions-base-image:20-bookworm"
         # alpine with Node.js
         "alpine-latest:docker://node:20-alpine"
         # nix flakes enabled image with Node.js
diff --git a/secrets/forgejo-actions-runner-token.age b/secrets/forgejo-actions-runner-token.age
index a3c00ef1..bf7e4690 100644
Binary files a/secrets/forgejo-actions-runner-token.age and b/secrets/forgejo-actions-runner-token.age differ