diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index d70b544..4aed6ad 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -87,17 +87,19 @@ jobs:
           cache-from: type=registry,ref=manticorum67/major-domo-database:buildcache
           cache-to: type=registry,ref=manticorum67/major-domo-database:buildcache,mode=max
 
-      # Create git tag and update VERSION file on successful push
+      # Create git tag via Gitea API (avoids branch protection issues with git push)
       - name: Tag release
         if: success() && github.ref == 'refs/heads/main'
         run: |
-          git config user.name "Gitea Actions"
-          git config user.email "actions@git.manticorum.com"
-          echo "${{ steps.meta.outputs.version }}" > VERSION
-          git add VERSION
-          git commit -m "chore: bump version to ${{ steps.meta.outputs.version }} [skip ci]" || true
-          git tag "${{ steps.meta.outputs.version }}"
-          git push origin main --tags
+          curl -s -X POST \
+            -H "Authorization: token ${{ github.token }}" \
+            -H "Content-Type: application/json" \
+            -d '{
+              "tag_name": "${{ steps.meta.outputs.version }}",
+              "target": "${{ github.sha }}",
+              "message": "Release ${{ steps.meta.outputs.version }}"
+            }' \
+            "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/tags"
 
       - name: Build Summary
         run: |