diff --git a/deploy/forgejo/register-lan-runner.sh b/deploy/forgejo/register-lan-runner.sh
index 48f9704..71f1c90 100755
--- a/deploy/forgejo/register-lan-runner.sh
+++ b/deploy/forgejo/register-lan-runner.sh
@@ -62,6 +62,13 @@ echo "==> Registering with $FORGEJO_URL (label: $LABELS)"
   --name "thermograph-lan-$(hostname -s)" \
   --labels "$LABELS"
 
+echo "==> Runner config (docker.sock automount, so docker:-labeled jobs like"
+echo "    build-push.yml can actually run 'docker build/push' -- generated"
+echo "    config only overridden on the one setting that matters here)"
+./forgejo-runner generate-config \
+  | sed 's/docker_host: "-"/docker_host: "automount"/' \
+  > "${RUNNER_DIR}/config.yaml"
+
 echo "==> systemd --user unit"
 mkdir -p "$HOME/.config/systemd/user"
 cat > "$HOME/.config/systemd/user/forgejo-runner.service" <<EOF
@@ -71,7 +78,7 @@ After=network-online.target
 
 [Service]
 WorkingDirectory=${RUNNER_DIR}
-ExecStart=${RUNNER_DIR}/forgejo-runner daemon
+ExecStart=${RUNNER_DIR}/forgejo-runner daemon -c config.yaml
 Restart=on-failure
 RestartSec=5