diff --git a/.gitea/workflows/docker.yml b/.gitea/workflows/docker.yml
new file mode 100644
index 0000000..cc2f538
--- /dev/null
+++ b/.gitea/workflows/docker.yml
@@ -0,0 +1,58 @@
+# Build et push de l'image Docker à chaque push sur main (→ :latest)
+# et à chaque tag vX.Y.Z (→ :X.Y.Z + :latest).
+# Secrets requis (Dépôt → Réglages → Actions → Secrets) :
+#   GHCR_USERNAME, GHCR_TOKEN    — compte GitHub avec droits paquet ghcr.io/aulyriusohm/ohm-streaming
+#   REGISTRY_TOKEN               — token Gitea avec droits paquet (push git.lanro.eu/roman/ohm_streaming)
+name: docker
+
+on:
+  push:
+    branches: [main]
+    tags: ['v*.*.*']
+
+jobs:
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        run: git clone --depth 1 --branch "$GITHUB_REF_NAME" "$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git" .
+
+      - name: Version
+        id: v
+        run: |
+          if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
+            v="${GITHUB_REF_NAME#v}"
+          else
+            v=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml)
+          fi
+          [[ "$v" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || { echo "✖ version invalide : $v"; exit 1; }
+          echo "version=$v" >> "$GITHUB_OUTPUT"
+          echo "▶ Version : $v"
+
+      - name: Build
+        env:
+          V: ${{ steps.v.outputs.version }}
+        run: |
+          docker build --build-arg VERSION="$V" \
+            -t ghcr.io/aulyriusohm/ohm-streaming:latest \
+            -t git.lanro.eu/roman/ohm_streaming:latest \
+            $([[ "$GITHUB_REF_TYPE" == "tag" ]] && echo "-t ghcr.io/aulyriusohm/ohm-streaming:$V -t git.lanro.eu/roman/ohm_streaming:$V") \
+            .
+
+      - name: Push GHCR
+        env:
+          V: ${{ steps.v.outputs.version }}
+        run: |
+          echo "${{ secrets.GHCR_TOKEN }}" | docker login ghcr.io -u "${{ secrets.GHCR_USERNAME }}" --password-stdin
+          docker push ghcr.io/aulyriusohm/ohm-streaming:latest
+          [[ "$GITHUB_REF_TYPE" == "tag" ]] && docker push "ghcr.io/aulyriusohm/ohm-streaming:$V"
+          docker logout ghcr.io
+
+      - name: Push registre Gitea
+        env:
+          V: ${{ steps.v.outputs.version }}
+        run: |
+          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.lanro.eu -u Roman --password-stdin
+          docker push git.lanro.eu/roman/ohm_streaming:latest
+          [[ "$GITHUB_REF_TYPE" == "tag" ]] && docker push "git.lanro.eu/roman/ohm_streaming:$V"
+          docker logout git.lanro.eu