diff --git a/manifests/forgejo/runner.yaml b/manifests/forgejo/runner.yaml
new file mode 100644
index 0000000..a8c0586
--- /dev/null
+++ b/manifests/forgejo/runner.yaml
@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: forgejo-runner
+  namespace: forgejo
+spec:
+  selector:
+    matchLabels:
+      app: forgejo-runner
+  template:
+    metadata:
+      labels:
+        app: forgejo-runner
+    spec:
+      containers:
+      - name: runner
+        image: code.forgejo.org/forgejo/runner:3.5.1
+        command: ["forgejo-runner", "daemon"]
+        env:
+        - name: FORGEJO_INSTANCE_URL
+          value: "http://forgejo.forgejo.svc.cluster.local:3000"
+        - name: FORGEJO_RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: forgejo-runner-token
+              key: token
+        - name: FORGEJO_RUNNER_NAME
+          value: "k3s-runner"
+        - name: DOCKER_HOST
+          value: tcp://localhost:2375
+        - name: DOCKER_TLS_CERTDIR
+          value: ""
+        volumeMounts:
+        - name: dind-storage
+          mountPath: /var/lib/docker
+      - name: dind
+        image: docker:dind
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: dind-storage
+          mountPath: /var/lib/docker
+      volumes:
+      - name: dind-storage
+        emptyDir: {}