diff --git a/.forgejo/workflows/build-container.yaml b/.forgejo/workflows/build-container.yaml
index 3bc1efd..59291f0 100644
--- a/.forgejo/workflows/build-container.yaml
+++ b/.forgejo/workflows/build-container.yaml
@@ -16,9 +16,6 @@ on:
 jobs:
   build:
     runs-on: k8s
-    env:
-      # For k8s runner with DinD sidecar, Docker is available via TCP
-      DOCKER_HOST: tcp://127.0.0.1:2375
     steps:
       - name: Parse tag
         id: parse
diff --git a/argocd/manifests/forgejo-runner/configmap.yaml b/argocd/manifests/forgejo-runner/configmap.yaml
index 860f96b..7d8ddef 100644
--- a/argocd/manifests/forgejo-runner/configmap.yaml
+++ b/argocd/manifests/forgejo-runner/configmap.yaml
@@ -18,3 +18,6 @@ data:
       network: "host"
       # Connect to DinD sidecar via TCP (not socket)
       docker_host: tcp://127.0.0.1:2375
+      # Set DOCKER_HOST in job containers so they can run docker commands
+      env:
+        DOCKER_HOST: tcp://127.0.0.1:2375