diff --git a/.forgejo/workflows/container-build.yml b/.forgejo/workflows/container-build.yml
index a26b3f8..4bdb1f3 100644
--- a/.forgejo/workflows/container-build.yml
+++ b/.forgejo/workflows/container-build.yml
@@ -2,17 +2,17 @@
 on: [push]
 jobs:
   configuration:
-    runs-on: docker
+    runs-on: private-vault
     container:
       image: quay.io/keycloak/keycloak:latest
       env:
-        PATH="/opt/keycloak/bin:/usr/bin:/usr/local/bin"
-        KC_HEALTH_ENABLED=false
-        KC_DB=postgres
-        KC_CACHE_STACK=tcp
-        KC_HTTPS_CLIENT_AUTH=request
-        KC_FEATURES=recovery-codes,passkeys,opentelemetry
-        KC_DB_URL=postgresql://postgres.services.tobie:5432/keycloak
+        PATH: "/opt/keycloak/bin:/usr/bin:/usr/local/bin"
+        KC_HEALTH_ENABLED: false
+        KC_DB: postgres
+        KC_CACHE_STACK: tcp
+        KC_HTTPS_CLIENT_AUTH: request
+        KC_FEATURES: recovery-codes,passkeys,opentelemetry
+        KC_DB_URL: postgresql://postgres.services.tobie:5432/keycloak
     steps:
       - run: kc.sh build
         working-directory: /opt/keycloak/