diff --git a/.gitea/workflows/publish-docker.yml b/.gitea/workflows/publish-docker.yml
index a01c6fe..8302dda 100644
--- a/.gitea/workflows/publish-docker.yml
+++ b/.gitea/workflows/publish-docker.yml
@@ -14,6 +14,9 @@ env:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -26,7 +29,7 @@ jobs:
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.GITEA_TOKEN }}
 
       - name: Extract image metadata (tags, labels)
         id: meta