diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 647e525..6a61f23 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -29,15 +29,22 @@ jobs:
 
       - name: Build and push container image
         run: |
+          set -ex
+
           IMAGE_TAG="${{ env.IMAGE }}:sha-${GITHUB_SHA::8}"
           IMAGE_LATEST="${{ env.IMAGE }}:latest"
 
-          buildah bud -f Containerfile -t "$IMAGE_TAG" -t "$IMAGE_LATEST" .
+          buildah bud --tls-verify=false -f Containerfile -t "$IMAGE_TAG" -t "$IMAGE_LATEST" .
 
-          AUTHFILE=$(mktemp)
-          buildah login --tls-verify=false --authfile "$AUTHFILE" "${{ env.REGISTRY }}" -u "${{ secrets.REGISTRY_USER }}" -p "${{secrets.REGISTRY_PASSWORD }}"
-          buildah push --tls-verify=false --authfile "$AUTHFILE" "$IMAGE_TAG"
-          buildah push --tls-verify=false --authfile "$AUTHFILE" "$IMAGE_LATEST"
+          CREDS="${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}"
+
+          echo "=== buildah push tag ==="
+          buildah push --tls-verify=false --creds "$CREDS" "$IMAGE_TAG"
+
+          echo "=== buildah push latest ==="
+          buildah push --tls-verify=false --creds "$CREDS" "$IMAGE_LATEST"
+
+          echo "IMAGE_TAG=$IMAGE_TAG" >> "$GITHUB_ENV"
 
       - name: Deploy to k3s
         run: |