container: privileged: true network: "container:forgejo-runner" options: "-v /var/run/docker.sock:/var/run/docker.sock" valid_volumes: - '**'