I think this order makes a difference.

.gitea/workflows/build.yaml

@@ -6,12 +6,6 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - name: login to container registry
-        uses: docker/login-action@v3
-        with:
-          registry: 10.0.0.103:3000
-          username: ${{ gitea.actor }}
-          password: ${{ secrets.GITEA_TOKEN }}
       - name: docker buildx setup
         uses: docker/setup-buildx-action@v3
         with:
@@ -19,6 +13,12 @@ jobs:
             [registry."10.0.0.103:3000"] 
               http = true
               insecure = true
+      - name: login to container registry
+        uses: docker/login-action@v3
+        with:
+          registry: 10.0.0.103:3000
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
       - name: checkout code
         uses: actions/checkout@v4
       - name: build and push to registry