diff --git a/.gitea/workflows/build-image.yaml b/.gitea/workflows/build-image.yaml
index 5ad4be2..9046e72 100644
--- a/.gitea/workflows/build-image.yaml
+++ b/.gitea/workflows/build-image.yaml
@@ -114,7 +114,11 @@ jobs:
         if: always()
         run: cat output/*.sha256 2>/dev/null || echo "no images produced"
 
-      - uses: actions/upload-artifact@v4
+      # v3, not v4. Gitea's artifact backend identifies as GHES, and
+      # @actions/artifact v2 (which backs upload-artifact@v4) refuses to talk to
+      # GHES outright — "GHESNotSupportedError". v3 works. The image is already
+      # zstd, so v3 storing it uncompressed costs nothing.
+      - uses: actions/upload-artifact@v3
         if: always()
         with:
           name: fedora-lenovo-yoga-c630
@@ -122,7 +126,6 @@ jobs:
             output/*.img.zst
             output/*.sha256
           retention-days: 14
-          compression-level: 0   # already zstd
           if-no-files-found: warn
 
       - name: Attach to release