diff --git a/.gitea/workflows/build-nginx.yaml b/.gitea/workflows/build-nginx.yaml
index 7b33dc8..9c050b1 100644
--- a/.gitea/workflows/build-nginx.yaml
+++ b/.gitea/workflows/build-nginx.yaml
@@ -34,6 +34,7 @@ jobs:
             linux/arm64
           push: true
           pull: true
+          ssh: default
           tags: |
             "gitea.woggioni.net/woggioni/nginx:latest"
             "gitea.woggioni.net/woggioni/nginx:v1.29.1"
diff --git a/nginx/Dockerfile b/nginx/Dockerfile
index 2b703b9..d233aea 100644
--- a/nginx/Dockerfile
+++ b/nginx/Dockerfile
@@ -42,8 +42,10 @@ USER luser
 WORKDIR /home/luser
 
 #RUN git clone --depth 1 --branch v4.0.0 https://github.com/libressl/portable.git libressl
-ADD --chown=luser:luser https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${LIBRESSL_VERSION}.tar.gz libressl.tgz
-RUN tar -xzf libressl.tgz && mv libressl-${LIBRESSL_VERSION} libressl && rm libressl.tgz
+#RUN git clone --depth 1 --branch v4.0.0 https://github.com/libressl/portable.git libressl
+ADD --mount=ssh --chown=luser:luser git@github.com/libressl/portable.git#v${LIBRESSL_VERSION} libressl
+#ADD --chown=luser:luser https://cdn.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${LIBRESSL_VERSION}.tar.gz libressl.tgz
+#RUN tar -xzf libressl.tgz && mv libressl-${LIBRESSL_VERSION} libressl && rm libressl.tgz
 RUN mkdir -p libressl/build
 RUN cmake -G Ninja -B libressl/build -S libressl \ 
 	-DCMAKE_BUILD_TYPE=Release \