diff --git a/ops/ci-runner/compose.yaml b/ops/ci-runner/compose.yaml
index 2bd3d5b..159f75b 100644
--- a/ops/ci-runner/compose.yaml
+++ b/ops/ci-runner/compose.yaml
@@ -6,6 +6,12 @@ services:
     entrypoint: ["act_runner"]
     command: ["--config", "/config.yaml", "daemon"]
     working_dir: /data
+    # The Gitea instance is published on loopback only, and its public name still
+    # points at an IPv4 address this host no longer has. Resolve the name to the
+    # host's LAN address so the runner can reach the Gitea API. Update this together
+    # with the `options` entry in config.yaml if the LAN address changes.
+    extra_hosts:
+      - "gitea.vandeplanque.com:192.168.1.56"
     volumes:
       - runner-data:/data
       - ./config.yaml:/config.yaml:ro
diff --git a/ops/ci-runner/config.yaml b/ops/ci-runner/config.yaml
index 60257a4..112094f 100644
--- a/ops/ci-runner/config.yaml
+++ b/ops/ci-runner/config.yaml
@@ -17,6 +17,10 @@ cache:
 container:
   network: ""
   privileged: false
+  # Job containers need the same name resolution as the runner itself, otherwise the
+  # checkout step clones from an address the job cannot reach. Must match the
+  # extra_hosts entry in compose.yaml.
+  options: "--add-host=gitea.vandeplanque.com:192.168.1.56"
   valid_volumes: []
   # The daemon uses Docker, but jobs/services do not receive the Docker socket.
   docker_host: "-"