diff --git a/flake.lock b/flake.lock
index d1fa270..05867cc 100644
--- a/flake.lock
+++ b/flake.lock
@@ -136,11 +136,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1720954236,
-        "narHash": "sha256-1mEKHp4m9brvfQ0rjCca8P1WHpymK3TOr3v34ydv9bs=",
+        "lastModified": 1732749044,
+        "narHash": "sha256-T38FQOg0BV5M8FN1712fovzNakSOENEYs+CSkg31C9Y=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "53e81e790209e41f0c1efa9ff26ff2fd7ab35e27",
+        "rev": "0c5b4ecbed5b155b705336aa96d878e55acd8685",
         "type": "github"
       },
       "original": {
diff --git a/modules/forgejo.nix b/modules/forgejo.nix
index 6f6df3e..2758720 100644
--- a/modules/forgejo.nix
+++ b/modules/forgejo.nix
@@ -25,4 +25,20 @@ with lib;
       '';
     };
   };
+  services.gitea-actions-runner = {
+    package = pkgs.forgejo-actions-runner;
+    instances.default = {
+      enable = true;
+      name = "monolith";
+      url = "https://git.tfcconnection.org";
+      # Obtaining the path to the runner token file may differ
+      # tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
+      token = "RP4DUN8EPbonAvl0TzQyco4iA5eXY5QYNc4btuzZ";
+      labels = [
+        "ubuntu-latest:docker://node:16-bullseye"
+        ## optionally provide native execution on the host:
+        "native:host"
+      ];
+    };
+  };
 }
diff --git a/system/shen/configuration.nix b/system/shen/configuration.nix
index ec65a4b..e141355 100644
--- a/system/shen/configuration.nix
+++ b/system/shen/configuration.nix
@@ -62,7 +62,7 @@
     cudatoolkit
   ];
 
-  # virtualisation.docker.enableNvidia = true;
+  virtualisation.docker.enableNvidia = true;
 
   services.samba = {
     enable = true;
@@ -151,6 +151,15 @@
               Referrer-Policy no-referrer-when-downgrade
       }
       redir /.well-known/oidc-configuration /apps/oidc/openid-configuration 301
+      handle_path /whiteboard/* {
+          reverse_proxy http://127.0.0.1:3002
+      }
+      '';
+    };
+    virtualHosts = {
+      "whiteboard.tfcconnection.org".extraConfig = ''
+	    encode gzip
+	    reverse_proxy localhost:3002
       '';
     };
     virtualHosts = {