diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 75e3fff..c98eec1 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -10,9 +10,9 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     # Bespoke runner image (Ubuntu 24.04 + make + git + node + go via
-    # actions/setup-go). See git.librete.ch/libretech/runner-image.
+    # actions/setup-go). See git.librete.ch/public/runner-image.
     container:
-      image: git.librete.ch/libretech/runner-image:v2
+      image: git.librete.ch/public/runner-image:v2
     timeout-minutes: 5
     steps:
       - name: Checkout
diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 1592cd2..934124f 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -34,7 +34,7 @@ jobs:
     # + perl + ssh, runner user pre-joined to docker gid 998 so the
     # auto-mounted /var/run/docker.sock is writable without --user root.
     container:
-      image: git.librete.ch/libretech/runner-image:v2
+      image: git.librete.ch/public/runner-image:v2
     timeout-minutes: 20
     if: ${{ vars.DEPLOY_ENABLED == 'true' }}
     steps:
diff --git a/docs/operations.md b/docs/operations.md
index 4071c1e..75ccfff 100644
--- a/docs/operations.md
+++ b/docs/operations.md
@@ -70,7 +70,7 @@ docker compose -f compose.yaml -f compose.netcup.yaml up -d
 
 Workflows run on the netcup `act_runner` (see `runner/` stack in
 the netcup umbrella). Both `ci.yml` and `deploy.yml` declare
-`container: image: git.librete.ch/libretech/runner-image:v1` —
+`container: image: git.librete.ch/public/runner-image:v1` —
 a bespoke Ubuntu 24.04 image (built and signed by us, hosted on
 the same Gitea instance) that bundles `git`, `make`, `node`,
 `perl`, `ssh`, and a docker CLI. The image's `runner` user is