diff --git a/.gitea/workflows/build-and-deploy.yml b/.gitea/workflows/build-and-deploy.yml
index fada314..e338454 100644
--- a/.gitea/workflows/build-and-deploy.yml
+++ b/.gitea/workflows/build-and-deploy.yml
@@ -1,5 +1,9 @@
 on: [ push ]
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build:
     runs-on: debian-latest
@@ -20,8 +24,8 @@ jobs:
         uses: docker/login-action@v4
         with:
           registry: viziona.dev
-          username: ${{ vars.DOCKER_PUSH_USER }}
-          password: ${{ secrets.DOCKER_PUSH_TOKEN }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
       - name: Build docker image
         run: docker build -t viziona.dev/taiqane/discord-webhook-proxy:nightly .
       - name: Push to docker registry
@@ -38,8 +42,8 @@ jobs:
         uses: docker/login-action@v4
         with:
           registry: viziona.dev
-          username: ${{ vars.DOCKER_PUSH_USER }}
-          password: ${{ secrets.DOCKER_PUSH_TOKEN }}
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
       - name: Build docker image
         run: docker build -t viziona.dev/taiqane/discord-webhook-proxy:${{ gitea.ref_name }} .
       - name: Push to docker registry