diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 34619f8..7b1cb2e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,11 +7,9 @@ on:
   workflow_dispatch:
 
 jobs:
-  # Cross-compile Windows winhttp.dll on Linux — media-server is the only runner on git.mithraic.cloud (no windows-latest, no ubuntu-latest)
+  # media-server is the only runner on git.mithraic.cloud (no windows-latest/ubuntu-latest). Forgejo Act: runs-on must exactly match runner labels.
   windows-cross:
-    runs-on: [self-hosted, linux, media-server]
-    # fallback: if runner registers as 'media-server' name, above matches. If it registers as ubuntu-latest, also try:
-    # runs-on: ubuntu-latest  (legacy)
+    runs-on: media-server
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -39,7 +37,7 @@ jobs:
         with: { name: winhttp-cross, path: DevourUnlocker_winhttp_*.zip }
 
   linux:
-    runs-on: [self-hosted, linux, media-server]
+    runs-on: media-server
     steps:
       - uses: actions/checkout@v4
       - name: Install deps if apt
@@ -53,7 +51,7 @@ jobs:
         with: { name: linux-so, path: build/*.so }
 
   standalone:
-    runs-on: [self-hosted, linux, media-server]
+    runs-on: media-server
     steps:
       - uses: actions/checkout@v4
       - run: python3 -m py_compile standalone/devour_unlocker.py standalone/gui.py tools/dump_metadata.py standalone/injector.py 2>&1 || python3 -m py_compile standalone/devour_unlocker.py standalone/gui.py tools/dump_metadata.py