diff --git a/homelab/stacks/gitea-runner/docker-compose.yml b/homelab/stacks/gitea-runner/docker-compose.yml
index f90d8660..24e46d47 100644
--- a/homelab/stacks/gitea-runner/docker-compose.yml
+++ b/homelab/stacks/gitea-runner/docker-compose.yml
@@ -9,4 +9,5 @@ services:
     environment:
       CONFIG_FILE: /config.yaml
       GITEA_INSTANCE_URL: https://gitea.jafner.tools
-      GITEA_RUNNER_REGISTRATION_TOKEN_FILE: registration.token
\ No newline at end of file
+    env_file:
+      - ./secrets.env # Defines GITEA_RUNNER_REGISTRATION_TOKEN
\ No newline at end of file
diff --git a/homelab/stacks/gitea-runner/registration.token b/homelab/stacks/gitea-runner/registration.token
deleted file mode 100644
index 7a851305..00000000
--- a/homelab/stacks/gitea-runner/registration.token
+++ /dev/null
@@ -1,58 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:SLYhonEYa444QP7ZJ3gYomlbPvFGJpFCmx3yLHGJDoHziy2PDtiUtQ==,iv:mT6WsasmLjXGSWHz6sGoeMkX8uV0sk2ES8oivVxvkkw=,tag:kPRnQ7k8m4crJvJ7+47Y8Q==,type:str]",
-	"sops": {
-		"shamir_threshold": 2,
-		"key_groups": [
-			{
-				"hc_vault": null,
-				"age": [
-					{
-						"recipient": "age1zswcq6t5wl8spr3g2wpxhxukjklngcav0vw8py0jnfkqd2jm2ypq53ga00",
-						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLYUliV0RLSC9odlFmdmZu\nM2pvUXRjOXhCRXBzeXlrdlZEK2x6MkcyTlJFCjNCaktxY0ZhVU9pZkpSNFBtbExR\ndExuc0tGWmZPS0FZWFkwN1BhVXFIZlkKLS0tIHBOcEVibzlRTWpvS1NUV2w1VnMw\nZXM5Z2hzai9FZUdrN2l6Y2F2RDZOMTQKT6V61I0Xt6uQU1Cg8zp4PGET5DeVHzG7\nJ5csS2Hmk9wIP7hhCG9jPJ6KaLu0tVRxG787R6d6P90S6LSlPbTQIZw=\n-----END AGE ENCRYPTED FILE-----\n"
-					}
-				]
-			},
-			{
-				"hc_vault": null,
-				"age": [
-					{
-						"recipient": "age1zswcq6t5wl8spr3g2wpxhxukjklngcav0vw8py0jnfkqd2jm2ypq53ga00",
-						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6KzRoc3Ywc01jQ0hnTGNy\nWnhQcjlMbWdyZUNDa05sbUxNcVpkZ3R6Tmg0ClBMdklSSjJTL3VIaWJGd0VoMm9h\nWlI4eUF6c0crT3ZMRVUrcFIyT0prNTQKLS0tIG1ETm4raVgwN3ZQSlk5Z0hYSkxY\naVJ6Yk5sUEsvblhrN012UzFLVGljdnMKLf4HwCu8pR8NYq8A+8XfU0mRakbEiEQG\nuU/Fc1+3wd1F21SQp85zoGSioG1K+uamXHV+nzl8pH+aU9RcR4Cq7WY=\n-----END AGE ENCRYPTED FILE-----\n"
-					}
-				]
-			},
-			{
-				"hc_vault": null,
-				"age": [
-					{
-						"recipient": "age193t908fjxl8ekl77p5xqnpj4xmw3y0khvyzlrw22hdzjduk6l53q05spq3",
-						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3K0hRNy9Dd0JTZ1FPVHpS\ncE5TL256TS9aZmxFMG0rN3NYTTVVWitpa0ZFClVvcUx0YkFLN2pPcFVPcjhYN3k0\nQ0tLeC9oV0czRU0zaWZjNERVYWRSQW8KLS0tIEJnSzQrV0hENnM3emVmMTVTbCs0\nVjJldXdkWkJDNUI1eHl6eEQ1NDVsSTQKb1cCxYt3Lzvfv1DhEpoVDAicr/1+SGsl\n1RLBAZBUjPb2Xiq9dsWV8Hjn3tniYYl2VIeFG2+x/vCcZ6Izmfs4ypU=\n-----END AGE ENCRYPTED FILE-----\n"
-					}
-				]
-			},
-			{
-				"hc_vault": null,
-				"age": [
-					{
-						"recipient": "age13prhyye2jy3ysa6ltnjgkrqtxrxgs0035d86jyn4ltgk3wxtqgrqgav855",
-						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWM2RnMGczRktxbThlcFlC\nZWJOY3lJUHR6N2Q0NmtkNk8xNlFaOE5ZdFdJCnhLVy9KeVNoSEJyTXVVQ0daLzNK\nQXFjSGp5OGxBODhKYlBaQjZleEpyaU0KLS0tIEpSbGJxUzdlbnAwNGk3SGVkVUoz\nZFBlS1dMVnhYZmdMRFF2NVUxd1lBNWsK/z59WUrID3VTuAO1oFIviYcaQVz4/zqo\nWHu4Pf09EXBff7wevCrMN/v3yeVmakKtpcUdOfc4UkPrmhD+nRciOGA=\n-----END AGE ENCRYPTED FILE-----\n"
-					},
-					{
-						"recipient": "age1n20krynrj75jqfy2muvhrygvzd4ee8ngamljqavsrk033zwx0ses2tdtfe",
-						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzUUZZbExhdGNZdllRdHNx\nRlV1d0NzeXJKejJDR2dKbnFnRFFtZjRUeG5jClRJTmVyM1FVTVRjY1dZOXAwWExO\nbFZadEkybFVWQ0YwcUhEZGJCa3kwSk0KLS0tIGZmK1ppV21KRFN3OEFoUkJsVkhx\nYU1rdlV4SG1PSmtGTDBXWGN1UWhWUVEK2n5erQjTgK0OxSNR8cQkv6kOGIq9xVoi\nf+xfILF3DEUWr6XrIRYPVy0dkPGv+38PSM2yUYfZL7oYMHrOYpL1fp0=\n-----END AGE ENCRYPTED FILE-----\n"
-					}
-				]
-			}
-		],
-		"kms": null,
-		"gcp_kms": null,
-		"azure_kv": null,
-		"hc_vault": null,
-		"age": null,
-		"lastmodified": "2024-08-29T21:23:29Z",
-		"mac": "ENC[AES256_GCM,data:VohlTWw4UWjy8jd8dRUIB/0BT6i55R+7DN4Tu7uRZ9XfpHCwk8SP/g88kYKA9a6o+eNv3+TWjmHNNvESbWuoGnvuAeI02/krGTk2lSmaZ0fWUcNW9TsjVHz/uhwIl/UoQEufcuzr4W4C27hfaVKunlMPSuL/h078glB8ZIJcb9I=,iv:tAhuu+kVM72lGBZBA/m2jZz9T05QKfhFOdqpDkhHe6s=,tag:lqM3pju5OAY75z26VbvawA==,type:str]",
-		"pgp": null,
-		"unencrypted_suffix": "_unencrypted",
-		"version": "3.9.0"
-	}
-}
\ No newline at end of file
diff --git a/homelab/stacks/gitea-runner/secrets.env b/homelab/stacks/gitea-runner/secrets.env
new file mode 100644
index 00000000..dfe5777b
--- /dev/null
+++ b/homelab/stacks/gitea-runner/secrets.env
@@ -0,0 +1,58 @@
+{
+	"GITEA_RUNNER_REGISTRATION_TOKEN": "ENC[AES256_GCM,data:n1LLmwwqtoZYJ8AirNlOZFer+CT6dD3E5RIrEF9cqY7/HgNW8vU3oA==,iv:rFSJlvQ34u4uMPWlZCjyRlP42YPPaGkG3kHPReGRhBg=,tag:BwdkvNGL5o67Wa/PngkdRQ==,type:str]",
+	"sops": {
+		"shamir_threshold": 2,
+		"key_groups": [
+			{
+				"hc_vault": null,
+				"age": [
+					{
+						"recipient": "age1zswcq6t5wl8spr3g2wpxhxukjklngcav0vw8py0jnfkqd2jm2ypq53ga00",
+						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSSVpoOTQvTVRYNjdscEpy\nNGZzSzBrL1Z1NjJ2YVZSWEtqVG5uWkNvTlhvCkZVdWllTU93Nlg3aklrWkNmUXow\nWW51ZS9DaWJmQWgrVWlxQlJZenUwU3MKLS0tIEZVRHhHbDdMNWxmUUhNbUdjdHpY\nYUxJMUFCWHZKMHFPV1I3MldITW84K1EKUK+2E93+2iyVibN5+C+VK8SESdHCpkWK\nqW6+sPFTxmDP4sz9dviNQID1BbL48E4VEBxwRoSnzUcwHS0qwTE6M58=\n-----END AGE ENCRYPTED FILE-----\n"
+					}
+				]
+			},
+			{
+				"hc_vault": null,
+				"age": [
+					{
+						"recipient": "age1zswcq6t5wl8spr3g2wpxhxukjklngcav0vw8py0jnfkqd2jm2ypq53ga00",
+						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpSEFxbzk2QjN0SVc0ZGRw\nUzVCRG41WnRWZDRMOEY3QXllZVRFUm5zVVhZCkxXY3EzbFRwRmVpUThEN0ZESlB5\nYmh1L3Fhc2E4UnhUSXlwalZPeGE3Q3MKLS0tIHArRWlEd2tGTGd1N1RtSEg0Z3NC\nQ1J1bDZNa1RQa1pmRzlQK0JnZDlpaDAKGG+88NFHlac/uAH+peCQ387TcVimccr3\na/vzPw8ugR2gLdKqvBSwuPFJwy/LEm1hKGI4+/gnddyAglfEbFOSrbA=\n-----END AGE ENCRYPTED FILE-----\n"
+					}
+				]
+			},
+			{
+				"hc_vault": null,
+				"age": [
+					{
+						"recipient": "age193t908fjxl8ekl77p5xqnpj4xmw3y0khvyzlrw22hdzjduk6l53q05spq3",
+						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnbURORWdrYi9FcHo5eUkz\nT0FLTWVtZ1hBTTB0MjRCQ1RtakRvMWNhcFQ0CnhBQUdEYWVtYjNXRTlRVXY2c3Nl\nS0ZHYmJJQ3VTNTdRVHhMUTRtQzJaeUUKLS0tIGdpSDYwOXJTVEN2aGhPc0d4ZkNo\nRm9BLzR2a0ZmQXJwL3UxVTZiSzJnM0UK8lMLWn3TO75GrMhI0iSMQnF8sBfE1nUb\nBHjlR5PggfuewrFSqPHcsyyGitR0MFkRl4r2j9/sf1Vyqnp7KYiq05k=\n-----END AGE ENCRYPTED FILE-----\n"
+					}
+				]
+			},
+			{
+				"hc_vault": null,
+				"age": [
+					{
+						"recipient": "age13prhyye2jy3ysa6ltnjgkrqtxrxgs0035d86jyn4ltgk3wxtqgrqgav855",
+						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMRVNYVDEwZXNYcTJyR0o5\nYlcrK1BOenFEM1I0Q3plWW8vUzg1VkVVd0hZCitQL2Z0bGpyS2k4OEg0WE5oWDl1\nR2ErTGRONXJoSUdpd3czU3BjVWNENEkKLS0tIDkxMjdncm41b1BOY3JuSXB3UHBs\ncEdISHpzY3V0QWMxRmxYOXUyRFA0bWMKk5aHC+yqP9pdYjJQBv3GnWvvk1PAXIdZ\nG+qX6nSgsLbRu5RwFlaxtMl+pp+8ctaiOVqbJDEKlV5x3v/fpQRPdfI=\n-----END AGE ENCRYPTED FILE-----\n"
+					},
+					{
+						"recipient": "age1n20krynrj75jqfy2muvhrygvzd4ee8ngamljqavsrk033zwx0ses2tdtfe",
+						"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0RzVhL2lEdzdtWDkrOER3\nVkRFa3dYdFZUQnY5K21mcWFTczViZlJMZkQ0CkNrSmpSdDNuMWRZRTVMTmQ0Zm41\ndVk2UVY0alg5a1RJcTc5cStKV0twc2cKLS0tIFREbTRRT1g4TWV6bmlKekdGRnNS\nL3ZENVdPcEFuSC9Tb2Z6czhtWTJlQ3MKk5NgF2Wmepx+OMoP632uW7jmIeKIFS5G\nE6Vqd8B/sAil8MAc/kK+fKXm3cSnHNI0gv+UzFVB9iU0Nxb5WyK48AI=\n-----END AGE ENCRYPTED FILE-----\n"
+					}
+				]
+			}
+		],
+		"kms": null,
+		"gcp_kms": null,
+		"azure_kv": null,
+		"hc_vault": null,
+		"age": null,
+		"lastmodified": "2024-08-30T03:21:43Z",
+		"mac": "ENC[AES256_GCM,data:cyNCA1sZsftZ9vRRXO5pawg13xq/oWdVFb+zZnxUcd+n83lIdo4vRx1R5lVZWhvJRIcz7Zf6oFGEQwEHAW85DWvgRC8WIyuGnEmSNS9+n5SGC9cBLhrieqPqvkqc3F6RilVq5v8JPUU0/1zk5805LiaNVkuoLZ/L4nKSPuYoH4o=,iv:osE9t+t8xTEiTYbii4VTZFz/Lrq4HJoV2RwAlAEblKk=,tag:81sVG9nEVg+kyt4omCo59w==,type:str]",
+		"pgp": null,
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.9.0"
+	}
+}
\ No newline at end of file