diff --git a/services/forgejo-runner.nix b/services/forgejo-runner.nix
index ca1f5e9..37ba944 100644
--- a/services/forgejo-runner.nix
+++ b/services/forgejo-runner.nix
@@ -16,6 +16,9 @@
             name = config.networking.hostName;
             url = "https://git.rab.lol";
             tokenFile = config.age.secrets.forgejo-runner-token.path;
+            settings = {
+              container.network = "bridge";
+            };
             labels = [
               "ubuntu-latest:docker://node:16-bullseye"
               "ubuntu-22.04:docker://node:16-bullseye"
@@ -31,7 +34,7 @@
           defaultNetwork.settings.dns_enabled = true;
         };
 
-        networking.firewall.trustedInterfaces = [ "br-+" "podman+" "veth+" ];
+        networking.firewall.trustedInterfaces = [ "podman+" ];
       };
   };
 }