diff --git a/scripts/build-release.sh b/scripts/build-release.sh
index b3e4cf20..9d965413 100755
--- a/scripts/build-release.sh
+++ b/scripts/build-release.sh
@@ -199,7 +199,9 @@ success "Created: $TARBALL (${TARBALL_SIZE})"
 if [[ "$UPLOAD" == "true" ]]; then
   source "$PROJECT_DIR/.env" 2>/dev/null || true
   GITEA_TOKEN="${GITEA_API_TOKEN:-}"
-  GITEA_HOST="${GITEA_URL:-https://gitea.bnkops.com}"
+  # GITEA_URL is the internal Docker hostname — use GITEA_REGISTRY for external access
+  GITEA_REGISTRY_HOST="${GITEA_REGISTRY%%/*}"  # strip /admin path → gitea.bnkops.com
+  GITEA_HOST="${GITEA_EXTERNAL_URL:-https://${GITEA_REGISTRY_HOST:-gitea.bnkops.com}}"
 
   if [[ -z "$GITEA_TOKEN" ]]; then
     warn "GITEA_API_TOKEN not set — skipping upload"