diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index bd75c25..6053135 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -255,7 +255,7 @@ jobs:
           # Write it to the host via a remote Podman helper container.
           # Run as uid:gid 1001:1001 so writes match prod-service’s ownership.
           podman --remote run --rm -i \
-            --user 1001:1001 \
+            --userns=keep-id \
             -v /opt/sharenet/nginx:/host-nginx:rw \
             alpine:3.20 sh -c 'install -D -m 0644 /dev/stdin /host-nginx/nginx.conf' \
             < /tmp/nginx.conf