diff --git a/gitlab-runner.nix b/gitlab-runner.nix
index a63fbe73edfa919aaff05311d472ffdcefa5ad1f..ecb5118e6b120aa8f0c272fab54d8098be52d20c 100644
--- a/gitlab-runner.nix
+++ b/gitlab-runner.nix
@@ -2,6 +2,7 @@
 
 {
   age.secrets."secrets/ovni-token".file = ./secrets/ovni-token.age;
+  age.secrets."secrets/nosv-token".file = ./secrets/nosv-token.age;
 
   services.gitlab-runner = {
     enable = true;
@@ -24,6 +25,16 @@
           http_proxy = "http://localhost:23080";
         };
       };
+      nosv-docker = {
+        registrationConfigFile = config.age.secrets."secrets/nosv-token".path;
+        dockerImage = "debian:stable";
+        tagList = [ "docker" "xeon" ];
+        registrationFlags = [ "--docker-network-mode host" ];
+        environmentVariables = {
+          https_proxy = "http://localhost:23080";
+          http_proxy = "http://localhost:23080";
+        };
+      };
     };
   };
 
diff --git a/secrets.nix b/secrets.nix
index 425f8c8dd8201798da926544b23ca27cf70d26ee..7c5aea70a3b89a7c5c0bfa1a615c58720b3dff2d 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -5,4 +5,5 @@ let
 in
 {
   "secrets/ovni-token.age".publicKeys = systems;
+  "secrets/nosv-token.age".publicKeys = systems;
 }
diff --git a/secrets/nosv-token.age b/secrets/nosv-token.age
new file mode 100644
index 0000000000000000000000000000000000000000..b26d482ab5e0522be3058a61ea400bb213e6c327
Binary files /dev/null and b/secrets/nosv-token.age differ