diff --git a/.gitea/workflows/docker.yml b/.gitea/workflows/docker.yml
index 024e570..aab1fa4 100644
--- a/.gitea/workflows/docker.yml
+++ b/.gitea/workflows/docker.yml
@@ -92,8 +92,8 @@ jobs:
             fi
             echo "仍在等待锁释放..."; sleep 5
           done
-          apt-get update -y -o Dpkg::Lock::Timeout=600 --allow-unauthenticated --allow-insecure-repositories --allow-downgrades
-          apt-get install -y -o Dpkg::Lock::Timeout=600 --allow-unauthenticated --allow-insecure-repositories --allow-downgrades --force-yes jq curl ca-certificates docker.io
+          apt-get update -y -o Dpkg::Lock::Timeout=600 --allow-unauthenticated --allow-downgrades
+          apt-get install -y -o Dpkg::Lock::Timeout=600 --allow-unauthenticated --allow-downgrades --force-yes jq curl ca-certificates docker.io
           docker --version
           jq --version
           curl --version
diff --git a/push.sh b/push.sh
new file mode 100644
index 0000000..d6289e2
--- /dev/null
+++ b/push.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+# build-and-push.sh
+
+set -e
+
+# cd /Users/Apple/code2025/server
+cd /Users/Apple/vpn/ppanel-server
+# 固定版本号为latest
+VERSION=latest
+
+# 构建镜像
+echo "Building image with version: $VERSION"
+docker build -f Dockerfile --platform linux/amd64 --build-arg TARGETARCH=amd64 -t registry.kxsw.us/ppanel/ppanel-server:$VERSION .
+docker tag registry.kxsw.us/ppanel/ppanel-server:$VERSION registry.kxsw.us/ppanel/ppanel-server:latest
+
+# 推送镜像
+echo "Pushing image to registry.kxsw.us"
+docker push registry.kxsw.us/ppanel/ppanel-server:$VERSION
+docker push registry.kxsw.us/ppanel/ppanel-server:latest
+
+
+echo "Build and push completed successfully!"
+# docker-compose exec certbot certbot certonly --webroot --webroot-path=/etc/letsencrypt -d api-dev.kxsw.us