diff --git a/apps/forgejo-runner/deployment.yaml b/apps/forgejo-runner/deployment.yaml
index 4e84c9f..384bb28 100644
--- a/apps/forgejo-runner/deployment.yaml
+++ b/apps/forgejo-runner/deployment.yaml
@@ -1,71 +1,75 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
+  name: forgejo-runner
+  namespace: forgejo
   labels:
     app: forgejo-runner
-  name: forgejo-runner
 spec:
   replicas: 1
   selector:
     matchLabels:
       app: forgejo-runner
-  strategy: {}
   template:
     metadata:
-      creationTimestamp: null
       labels:
         app: forgejo-runner
     spec:
       restartPolicy: Always
       volumes:
-        - name: docker-certs
-          emptyDir: {}
-        - name: runner-data
-          emptyDir: {}
+      - name: docker-certs
+        emptyDir: {}
+      - name: runner-data
+        emptyDir: {}
       initContainers:
-        - name: runner-config-generation
-          image: code.forgejo.org/forgejo/runner
-          command:
-            ['forgejo-runner create-runner-file --instance $FORGEJO_INSTANCE_URL --secret $RUNNER_SECRET --connect']
-          env:
-            - name: RUNNER_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: forgejo-runner-token
-                  key: token
-            - name: FORGEJO_INSTANCE_URL
-              value: https://git.patanix.de
-          volumeMounts:
-            - name: runner-data
-              mountPath: /data
+      - name: runner-config-generation
+        image: code.forgejo.org/forgejo/runner:6.3.1
+        command:
+          [
+            "sh",
+            "-c",
+            "forgejo-runner create-runner-file --instance $FORGEJO_INSTANCE_URL --secret $RUNNER_SECRET --connect"
+          ]
+        env:
+        - name: RUNNER_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: forgejo-runner-token
+              key: token
+        - name: FORGEJO_INSTANCE_URL
+          value: https://git.patanix.de
+        volumeMounts:
+        - name: runner-data
+          mountPath: /data
       containers:
-        - name: runner
-          image: code.forgejo.org/forgejo/runner
-          command:
-            [
-              'sh',
-              '-c',
-              "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon",
-            ]
-          env:
-            - name: DOCKER_HOST
-              value: tcp://localhost:2376
-            - name: DOCKER_CERT_PATH
-              value: /certs/client
-            - name: DOCKER_TLS_VERIFY
-              value: '1'
-          volumeMounts:
-            - name: docker-certs
-              mountPath: /certs
-            - name: runner-data
-              mountPath: /data
-        - name: daemon
-          image: docker:dind
-          env:
-            - name: DOCKER_TLS_CERTDIR
-              value: /certs
-          securityContext:
-            privileged: true
-          volumeMounts:
-            - name: docker-certs
-              mountPath: /certs
+      - name: runner
+        image: code.forgejo.org/forgejo/runner:6.3.1
+        command:
+          [
+            "sh",
+            "-c",
+            "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon"
+          ]
+        env:
+        - name: DOCKER_HOST
+          value: tcp://localhost:2376
+        - name: DOCKER_CERT_PATH
+          value: /certs/client
+        - name: DOCKER_TLS_VERIFY
+          value: "1"
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs
+        - name: runner-data
+          mountPath: /data
+      - name: daemon
+        image: docker:23.0.6-dind
+        env:
+        - name: DOCKER_TLS_CERTDIR
+          value: /certs
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs
+