diff --git a/docker-compose/act-runner/config.yml.j2 b/docker-compose/act-runner/config.yml.j2
new file mode 100644
index 00000000..08794ee5
--- /dev/null
+++ b/docker-compose/act-runner/config.yml.j2
@@ -0,0 +1,7 @@
+---
+container:
+  valid_volumes: []
+log:
+  level: info
+runner:
+  capacity: 1
diff --git a/docker-compose/act-runner/docker-compose.yml.j2 b/docker-compose/act-runner/docker-compose.yml.j2
index 675c9318..4abf17d9 100644
--- a/docker-compose/act-runner/docker-compose.yml.j2
+++ b/docker-compose/act-runner/docker-compose.yml.j2
@@ -8,11 +8,26 @@ services:
     restart: always
     volumes:
       - act_runner_data:/data
+      - ./config.yml:/config.yml
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
       GITEA_INSTANCE_URL: https://git.mgrote.net
       GITEA_RUNNER_REGISTRATION_TOKEN: "{{ lookup('viczem.keepass.keepass', 'gitea_act_runner_token', 'password') }}" # only used on first start, https://git.mgrote.net/admin/actions/runners
       GITEA_RUNNER_NAME: "docker10-act-runner"
+      CONFIG_FILE: /config.yml
 
 volumes:
   act_runner_data:
+
+
+
+  # Volumes (including bind mounts) can be mounted to containers. Glob syntax is supported, see https://github.com/gobwas/glob
+  # You can specify multiple volumes. If the sequence is empty, no volumes can be mounted.
+  # For example, if you only allow containers to mount the `data` volume and all the json files in `/src`, you should change the config to:
+  # valid_volumes:
+  #   - data
+  #   - /src/*.json
+  # If you want to allow any volume, please use the following configuration:
+  # valid_volumes:
+  #   - '**'
+  valid_volumes: []