diff --git a/.gitea/workflows/build-docs.yaml b/.gitea/workflows/build-docs.yaml
index 0a07560..66e24ce 100644
--- a/.gitea/workflows/build-docs.yaml
+++ b/.gitea/workflows/build-docs.yaml
@@ -95,14 +95,17 @@ jobs:
           docker info >/dev/null   # confirms the dind daemon is reachable
 
       - name: Log in to container registry
+        # Use Gitea's built-in container registry (gitea.leeworks.dev), which
+        # has a valid Let's Encrypt cert. The standalone registry.leeworks.dev
+        # serves Traefik's default self-signed cert and fails TLS verification.
         run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | docker login registry.leeworks.dev \
+          echo "${{ secrets.GITEA_TOKEN }}" | docker login gitea.leeworks.dev \
             -u ${{ gitea.actor }} --password-stdin
 
       - name: Build and push docs-site image
         working-directory: api-company/docs-site
         run: |
-          IMAGE="registry.leeworks.dev/leeworks-agents/docs-site"
+          IMAGE="gitea.leeworks.dev/leeworks-agents/docs-site"
           SHA="${{ gitea.sha }}"
           docker build -t "$IMAGE:$SHA" -t "$IMAGE:latest" .
           docker push "$IMAGE:$SHA"