diff --git a/docs/ci.md b/docs/ci.md
index ed8ac10d..e93dc266 100644
--- a/docs/ci.md
+++ b/docs/ci.md
@@ -4,11 +4,11 @@ The `hive-ci` module runs a Forgejo Actions runner in a `hive-ci` nixos-containe
 
 ## Operator bootstrap
 
-Set `services.hyperhive.ci.enable = true` in the host NixOS config. That's it — no manual token provisioning.
+Set `services.hyperhive.forge.ci.enable = true` in the host NixOS config. That's it — no manual token provisioning.
 
 **Requirements:**
 - `services.hyperhive.forge.enable = true` must also be set (the runner registers against hive-forge).
-- Optional: tune `services.hyperhive.ci.name` (runner name in forge admin panel), `concurrency` (parallel job capacity), `labels` (workflow targeting).
+- Optional: tune `services.hyperhive.forge.ci.name` (runner name in forge admin panel), `concurrency` (parallel job capacity), `labels` (workflow targeting), `jobTimeout` (per-job wall-clock cap, default `"1h"`, Go duration string e.g. `"3h"` — a job that exceeds it is killed so a hung or runaway build can't hold the runner's single slot indefinitely).
 
 ## Container design