diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 104ef5e..9e2d307 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -31,13 +31,16 @@ jobs:
           repository: ${{ env.UPSTREAM_REPO }}
           path: ${{ env.UPSTREAM_DIR }}
           token: ${{ secrets.GITEA_TOKEN }}
+          # Without an explicit ref, checkout asks the API for the default
+          # branch and fails on this Gitea with "not found".
+          ref: main
 
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
-          cache-dependency-path: |
-            pulumi-dokploy/provider/go.sum
-            pulumi-dokploy/sdk/go.sum
+          # The runner's cache server is unreachable from job containers, so
+          # every restore/save hangs until timeout. Re-enable once fixed.
+          cache: false
 
       - uses: actions/setup-node@v4
         with:
diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 5674c7f..b4791c9 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -33,10 +33,13 @@ jobs:
           repository: ${{ env.UPSTREAM_REPO }}
           path: ${{ env.UPSTREAM_DIR }}
           token: ${{ secrets.GITEA_TOKEN }}
+          # checkout's default-branch lookup returns "not found" on this Gitea.
+          ref: main
 
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
+          cache: false
 
       - uses: goreleaser/goreleaser-action@v6
         with:
@@ -59,10 +62,13 @@ jobs:
           repository: ${{ env.UPSTREAM_REPO }}
           path: ${{ env.UPSTREAM_DIR }}
           token: ${{ secrets.GITEA_TOKEN }}
+          # checkout's default-branch lookup returns "not found" on this Gitea.
+          ref: main
 
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
+          cache: false
 
       - uses: actions/setup-node@v4
         with: