diff --git a/manifests/artemis/gitea-runners/runner-artemis-1.yaml b/manifests/artemis/gitea-runners/runner-artemis-1.yaml
index 7f0668e..bd52dbd 100644
--- a/manifests/artemis/gitea-runners/runner-artemis-1.yaml
+++ b/manifests/artemis/gitea-runners/runner-artemis-1.yaml
@@ -1,43 +1,45 @@
 kind: PersistentVolumeClaim
 apiVersion: v1
 metadata:
-  name: runner-artemis-1-vol
+  name: act-runner-vol-1
 spec:
   accessModes:
     - ReadWriteOnce
   resources:
     requests:
       storage: 1Gi
+  storageClassName: standard
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   labels:
-    app: runner-artemis-1
-  name: runner-artemis-1
+    app: act-runner-1
+  name: act-runner-1
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app: runner-artemis-1
+      app: act-runner-1
   strategy: {}
   template:
     metadata:
       creationTimestamp: null
       labels:
-        app: runner-artemis-1
+        app: act-runner-1
     spec:
       restartPolicy: Always
       volumes:
-        - name: docker-certs
-          emptyDir: {}
         - name: runner-data
           persistentVolumeClaim:
-            claimName: runner-artemis-1-vol
+            claimName: act-runner-vol-1
+      securityContext:
+        fsGroup: 1000
       containers:
-        - name: runner-artemis-1
-          image: gitea/act_runner:nightly
-          command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- run.sh"]
+        - name: runner-1
+          image: gitea/act_runner:nightly-dind-rootless
+          imagePullPolicy: Always
+          # command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- /opt/act/run.sh"]
           env:
             - name: DOCKER_HOST
               value: tcp://localhost:2376
@@ -46,24 +48,15 @@ spec:
             - name: DOCKER_TLS_VERIFY
               value: "1"
             - name: GITEA_INSTANCE_URL
-              value: "https://git.dgse.cloud"
+              value: https://git.dgse.cloud
             - name: GITEA_RUNNER_REGISTRATION_TOKEN
               valueFrom:
                 secretKeyRef:
                   name: gitea-runner-token
                   key: token
-          volumeMounts:
-            - name: docker-certs
-              mountPath: /certs
-            - name: runner-data
-              mountPath: /data
-        - name: daemon
-          image: docker:23.0.6-dind
-          env:
-            - name: DOCKER_TLS_CERTDIR
-              value: /certs
           securityContext:
             privileged: true
           volumeMounts:
-            - name: docker-certs
-              mountPath: /certs
+            - name: runner-data
+              mountPath: /data
+