diff --git a/global/overlay/etc/puppet/modules/soc/templates/runner/docker-compose.yml.erb b/global/overlay/etc/puppet/modules/soc/templates/runner/docker-compose.yml.erb
index 87dd815..6bf373f 100644
--- a/global/overlay/etc/puppet/modules/soc/templates/runner/docker-compose.yml.erb
+++ b/global/overlay/etc/puppet/modules/soc/templates/runner/docker-compose.yml.erb
@@ -53,7 +53,9 @@ services:
       - /opt/forgejo-runner/data:/data
       - /opt/forgejo-runner/docker_certs:/certs
     command: >-
+      bash -ec '
       if ! grep '--mount type=bind,source=/certs/client,target=/certs/client,readonly' config.yml > /dev/null; then
-        sed -i '\|options:| a \ \ \ \ --mount type=bind,source=/certs/client,target=/certs/client,readonly' config.yml
+        sed -i "\|options:| a \ \ \ \ --mount type=bind,source=/certs/client,target=/certs/client,readonly" config.yml
       fi
       forgejo-runner --config config.yml daemon
+      '