diff --git a/ansible/roles/forgejo_runner/templates/config.yaml.j2 b/ansible/roles/forgejo_runner/templates/config.yaml.j2
index d02e664..c7aa4e6 100644
--- a/ansible/roles/forgejo_runner/templates/config.yaml.j2
+++ b/ansible/roles/forgejo_runner/templates/config.yaml.j2
@@ -8,9 +8,11 @@ runner:
   timeout: {{ forgejo_runner_timeout }}
 
 container:
-  # Use host network so containers can reach localhost:3001 (Forgejo)
-  network: "host"
+  network: "bridge"
   privileged: {{ forgejo_runner_privileged | lower }}
+  # Map localhost to Docker host so containers can reach Forgejo at localhost:3001
+  # host-gateway is a special Docker value that resolves to the host IP
+  options: "--add-host localhost:host-gateway"
   # Mount Docker socket so jobs can build containers
   valid_volumes:
     - /var/run/docker.sock