diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index 3a484d01..2d9c6eb6 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -5,14 +5,21 @@ env:
     DEV_SHELL_NAME: CI
 jobs:
   build:
-    runs-on: nix-flakes
-
+    runs-on: ubuntu-latest
     steps:
-    - uses: https://github.com/workflow/nix-shell-action@v3
-      with:
-        flakes: .#devShells.x86_64-linux.default
-        script: |
-          git pull
+      - uses: actions/checkout@v3
+      - name: Install Nix
+        uses: https://github.com/DeterminateSystems/nix-installer-action@v4
+        with:
+          logger: pretty
+          log-directives: nix_installer=trace
+          backtrace: full
+          planner: linux-multi
+          init: none
+      - name: Run the Magic Nix Cache
+        uses: https://github.com/DeterminateSystems/magic-nix-cache-action@v1
+      - name: Check
+        run: |
           nix flake metadata
-          nix --no-sandbox develop -c statix check
           nix flake check
+          nix --no-sandbox develop -c statix check
diff --git a/nixos/boxes/bolty/gitea-runner-token.sops b/nixos/boxes/bolty/gitea-runner-token.sops
index 878f1281..3c7efc6d 100644
--- a/nixos/boxes/bolty/gitea-runner-token.sops
+++ b/nixos/boxes/bolty/gitea-runner-token.sops
@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data:kffo3XlbQbxewS4k/riSb0ZI8LHBJB+yAKRBFfVcu2F+WEA/RH7ktKz5h8dVa38=,iv:sNZ9DvwxfuZ43jsPjeXiBu0K+q2sZQ1G0hpyrzljwrM=,tag:VdDwz+7AWq5g1RiIyTR6xg==,type:str]",
+	"data": "ENC[AES256_GCM,data:kIRLM1P+6XhN9CVrErOPFCQgZr/cBohqLiHKYioFDTA7ZF/7SDKECarKpw58zIc=,iv:T0Nfrs91UIJLhTg/9p3E+Cg10Sm3/ew+Ai8BE/d2ANg=,tag:h1PHDfxuSlAD/HNtQ5Ibcg==,type:str]",
 	"sops": {
 		"kms": null,
 		"gcp_kms": null,
@@ -47,8 +47,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTXVwRzVSd2NSSi90SVVu\na05jeitPNnE5TVJ1NXk5WGd6UnhObUwveHg0CjU0dTNxUUdtb253ZHdTMFkycWdI\nbjZsanUwSGdHcFZkckIrRDRTWldha3cKLS0tIE8wM09WMnhNeklnYytUWkVTc01E\neldXYlJXRm1OMWo0T1U3UlY4SFBndVEKs56uk3j02g1g7Ae16UGfwRQJghPvS8iG\nDcIrJp6tb5ToYKeAGcTDpDvaQeNWKBX6fSLVIiJbgDWIbbZp1HRYpw==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2023-06-10T07:41:00Z",
-		"mac": "ENC[AES256_GCM,data:8nR7eWn7vU7Ng1DwFI+0THMRkD87et1KKuSVYwP7g6Bius/dNVGNjJOcUi76bPI4Eb0GLKDGFEL9jtZJLqWXYxufZUC3Jt/CHMERfrBXPywetljYf3NL3UmwXtBwltyu9RqnytybMDJu7tzogqIeUVJEut1PEAY9fH2vuFG7VjU=,iv:UKd2g58urL+qQ4Z+rL/bFxfrIc5ZO3AqnAhV9WZuHwc=,tag:yCKS/jpT5g3gnbaaZRuUUw==,type:str]",
+		"lastmodified": "2023-06-27T06:13:03Z",
+		"mac": "ENC[AES256_GCM,data:xKs09KM3zcGNInGsYyZn2OlnD3lfWZFWCQtFRDxujlWpDCJ04e68/GvcT4wo1LV7N/lUYAeSrJHl/ky0w2gB6KMkvIYK3GvzCULIIM2yhFfw0pr1xrVRS2doPOHVfXlLcJ5gP5eRAdDsBoQHa3XTWiU1Qn1gjf8o7hOxjDy9ALM=,iv:1gsL/x0CT7unTJQUT0K1wPInq89X0z2Hnp2xNVM9VBI=,tag:TGMGmXSGNOSii8Pp/+sUzA==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.7.3"
diff --git a/nixos/boxes/bolty/gitea-runner.nix b/nixos/boxes/bolty/gitea-runner.nix
index a366d654..70ee2cae 100644
--- a/nixos/boxes/bolty/gitea-runner.nix
+++ b/nixos/boxes/bolty/gitea-runner.nix
@@ -15,7 +15,7 @@
     labels = [
       "nixery-nix-node:docker://nixery.dev/shell/nix/git/nodejs:latest"
       "nix-flakes:docker://nixpkgs/nix-flakes:latest"
-      "ubuntu-latest:docker://node:current-bullseye" # compat with github actions
+      "ubuntu-latest:docker://node:16-bullseye" # compat with github actions
     ];
   };
 }