diff --git a/.gitea/workflows/docker-push.yaml b/.gitea/workflows/docker-push.yaml
index e62d067..e101bb9 100644
--- a/.gitea/workflows/docker-push.yaml
+++ b/.gitea/workflows/docker-push.yaml
@@ -1,6 +1,10 @@
 name: Nix Docker Push Test
 on: [push]
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest