diff --git a/.forgejo/workflows/build-push.yml b/.forgejo/workflows/build-push.yml
index 983a1e4..2fdcee7 100644
--- a/.forgejo/workflows/build-push.yml
+++ b/.forgejo/workflows/build-push.yml
@@ -9,43 +9,30 @@ on:
     tags:
       - 'v*'
 
-permissions:
-  contents: write
-  packages: write
-
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
     container:
       image: catthehacker/ubuntu:act-latest
-    permissions:
-      contents: write
-      packages: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
-      - name: Extract Registry Host
-        id: reg
-        run: |
-          SERVER_HOST=$(echo "${{ gitea.server_url }}" | sed -e 's|^https\?://||')
-          echo "host=${SERVER_HOST}" >> "$GITHUB_OUTPUT"
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to Forgejo Container Registry
         uses: docker/login-action@v3
         with:
-          registry: ${{ steps.reg.outputs.host }}
+          registry: ${{ gitea.server_url }}
           username: ${{ gitea.actor }}
-          password: ${{ secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract Metadata for Docker
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ steps.reg.outputs.host }}/${{ gitea.repository }}
+          images: ${{ gitea.server_url }}/${{ gitea.repository }}
           tags: |
             type=raw,value=latest,enable=${{ gitea.ref == 'refs/heads/main' || gitea.ref == 'refs/heads/master' }}
             type=ref,event=branch
@@ -59,7 +46,8 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          provenance: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
 
   create-release:
     needs: build-and-push
@@ -67,8 +55,6 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: catthehacker/ubuntu:act-latest
-    permissions:
-      contents: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
@@ -86,7 +72,7 @@ jobs:
           echo "Creating release ${RELEASE_NAME} with tag ${TAG_NAME}..."
 
           curl -s -X POST "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases" \
-            -H "Authorization: token ${{ secrets.REGISTRY_TOKEN || secrets.GITHUB_TOKEN }}" \
+            -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" \
             -H "Content-Type: application/json" \
             -d "{
               \"tag_name\": \"${TAG_NAME}\",