diff --git a/apps/gitea-runner/secrets.yaml b/apps/gitea-runner/secrets.yaml
index b33efb5..1cffdf6 100644
--- a/apps/gitea-runner/secrets.yaml
+++ b/apps/gitea-runner/secrets.yaml
@@ -1,9 +1,24 @@
-apiVersion: v1
-kind: Secret
+apiVersion: ENC[AES256_GCM,data:/Jo=,iv:mk6TN1yrl/uNssa2/3KTiQs1tHMSbZ3v40rcBMaEWoQ=,tag:JXZRik9sUqu8yvf5FUXddA==,type:str]
+kind: ENC[AES256_GCM,data:x2z9Kxh9,iv:KkIs7q3RcdV4sauhjAP2smoeDxk1FOUMtM21C0bx76w=,tag:OnV4S/LA1J7fuMDo8aG4jw==,type:str]
 metadata:
-  name: gitea-runner-secrets
-  namespace: gitea-runner
-type: Opaque
+    name: ENC[AES256_GCM,data:TVMhreibp1zewxyZDB57wvMC/qA=,iv:Fhw0Be+BqIQDzuMukneN+gIoWf3GErhIrbo0DTq2GDg=,tag:S8gNpX21qD6KdseOYtpqiA==,type:str]
+    namespace: ENC[AES256_GCM,data:51ZOjtgrHEopHfIX,iv:MC+v4Pi3rcT1gpG6MYuH10PaAxouJ8jMul7lDf7iAis=,tag:dlAAhbuYTibyiK7SnuzBrg==,type:str]
+type: ENC[AES256_GCM,data:Ue8BOeeF,iv:bBm1xUm+33HCMFJFY0WBZcUKw3iZwOOfOQojOeNwTxc=,tag:07boOZBuWxYhjJnfqJfx7A==,type:str]
 stringData:
-  GITEA_INSTANCE_URL: "https://lab2025.duckdns.org/git/"
-  GITEA_REGISTRATION_TOKEN: "c1ce1b4396109c5c906513a7ea8b29bc63bfbcbd"
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:t3YF3jb3Oksq0O2D2UfwNTvWvEPsj/F9izyYUi0qogE=,iv:O1GOoz3XkufcYeEHI2mfq4fBFwZYjQypfyyzWZZ5xhI=,tag:+7K91htH+01pyX8zSX++uA==,type:str]
+    GITEA_REGISTRATION_TOKEN: ENC[AES256_GCM,data:55H7skh9AaZu0iRs5m2+xxHQRJcAhSPKFg/1Ogw4GFlYU2TDlOr1Hw==,iv:KccbGwC9Bd4zLUa4C3i1fV7/g1JYPdgn2rXeRMQt5+c=,tag:MUdOp22CEUIjMOOn8I9ERQ==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTZjdIeVJJcTVrOHlzV05N
+            YzUxMzhvV3NvVVpQWTJnc09TRVJLNVRtbkhNCjQweDdOTGtTanhleHBQajZXamdv
+            UEJ4dXVzZXJad0Z4VXN2VDkzaDNUZFEKLS0tIEhmYTJhZ0dINmRkdDEwRUx5MzVz
+            WnRuMzBqS2p5cEJ3Q1pGTC80emRodkUKwda9Fl/GCOeHIp9xV339ZhACAsxrp6Ek
+            qqiH7Qkxs8HQvTk9Cjdc5Bqc4dKw81DV+qpC1XRd3wydLYtwcviHVg==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1ywayyaqwksdzedhf3w8xlsf89lnzw89c5yxtwjp42pnc5cds4dds5j6yxm
+    encrypted_regex: .*
+    lastmodified: "2026-09-18T01:21:13Z"
+    mac: ENC[AES256_GCM,data:Aq932Sen9GhMqypO0O2GYtkjLIGk9Bajm/H+dlkDtQozh1r7j1zIMGYKjOe21lW+JSNjdeostUx1TNSylBzF/nCKXh3P6KUO+Ow85XxbTaDoFyIHqqO0OfgcWhw5mEMTLTG3DNZwLo7W9l5+W7q/bYdQ0EIf9EzcexsJXS/PvO8=,iv:0MJPNIXy5xT1AFnH35icwcFw3erMVAH9hxT8geqiIec=,tag:q8QFm4CoAViOf+bd/v6IZQ==,type:str]
+    version: 3.13.3