diff --git a/examples/docker-compose/README.md b/examples/docker-compose/README.md
index c3b714c..9267111 100644
--- a/examples/docker-compose/README.md
+++ b/examples/docker-compose/README.md
@@ -16,5 +16,8 @@
       - /var/run/docker.sock:/var/run/docker.sock
     environment:
       - GITEA_INSTANCE_URL=<instance url>
+      # When using Docker Secrets, it's also possible to use
+      # GITEA_RUNNER_REGISTRATION_TOKEN_FILE to pass the location.
+      # The env var takes precedence
       - GITEA_RUNNER_REGISTRATION_TOKEN=<registration token>
 ```
diff --git a/scripts/run.sh b/scripts/run.sh
index d0154f0..49bde06 100755
--- a/scripts/run.sh
+++ b/scripts/run.sh
@@ -15,6 +15,11 @@ if [[ ! -z "${GITEA_RUNNER_LABELS}" ]]; then
   EXTRA_ARGS="${EXTRA_ARGS} --labels ${GITEA_RUNNER_LABELS}"
 fi
 
+# In case no token is set, it's possible to read the token from a file, i.e. a Docker Secret
+if [[ -z "${GITEA_RUNNER_REGISTRATION_TOKEN}" ]] && [[ -f "${GITEA_RUNNER_REGISTRATION_TOKEN_FILE}" ]]; then
+  GITEA_RUNNER_REGISTRATION_TOKEN=$(cat "${GITEA_RUNNER_REGISTRATION_TOKEN_FILE}")
+fi
+
 # Use the same ENV variable names as https://github.com/vegardit/docker-gitea-act-runner
 
 if [[ ! -s .runner ]]; then
@@ -44,5 +49,6 @@ if [[ ! -s .runner ]]; then
 fi
 # Prevent reading the token from the act_runner process
 unset GITEA_RUNNER_REGISTRATION_TOKEN
+unset GITEA_RUNNER_REGISTRATION_TOKEN_FILE
 
 act_runner daemon ${CONFIG_ARG}