diff --git a/.gitea/workflows/build-edge-node.yml b/.gitea/workflows/build-edge-node.yml
index 0d6e14e..e47c8d5 100644
--- a/.gitea/workflows/build-edge-node.yml
+++ b/.gitea/workflows/build-edge-node.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           registry: git.vpn.cusano.net
           username: ${{ gitea.actor }}
-          password: ${{ gitea.token }}
+          password: ${{ secrets.BUILD_TOKEN }}
 
       - name: Get version
         id: meta
diff --git a/.gitea/workflows/build-icecast.yml b/.gitea/workflows/build-icecast.yml
index a6966f6..f372c06 100644
--- a/.gitea/workflows/build-icecast.yml
+++ b/.gitea/workflows/build-icecast.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           registry: git.vpn.cusano.net
           username: ${{ gitea.actor }}
-          password: ${{ gitea.token }}
+          password: ${{ secrets.BUILD_TOKEN }}
 
       - name: Get version
         id: meta
diff --git a/.gitea/workflows/build-op25.yml b/.gitea/workflows/build-op25.yml
index a662778..3a2ea37 100644
--- a/.gitea/workflows/build-op25.yml
+++ b/.gitea/workflows/build-op25.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           registry: git.vpn.cusano.net
           username: ${{ gitea.actor }}
-          password: ${{ gitea.token }}
+          password: ${{ secrets.BUILD_TOKEN }}
 
       - name: Validate build configuration
         uses: docker/build-push-action@v6