diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index a43cea9..e4107a4 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -28,14 +28,15 @@ jobs:
 
       - name: Set up Docker Buildx
         run: |
-          # Remove builders antigos para evitar erros de 'instância já existe'
+          # Remove builders antigos e limpa instâncias com erro
           docker buildx rm local-builder || true
-          # Cria um builder limpo usando o driver container (necessário para push/multi-platform)
-          docker buildx create --name local-builder --driver docker-container --use
-          docker buildx inspect --bootstrap
+          # Cria um novo builder usando docker-container (indispensável para o push funcionar)
+          docker buildx create --name local-builder --driver docker-container --use --bootstrap
+          docker buildx inspect --use
 
       - name: Login to Forgejo Registry
         run: |
+          # O login deve ser feito no host para que o Buildx enxergue as credenciais
           echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} -u bohessefm --password-stdin
 
       - name: Build and Push Backend
@@ -44,6 +45,8 @@ jobs:
           context: ./backend
           file: ./backend/Dockerfile
           push: true
+          # Garante que ele use o builder que acabamos de criar
+          builder: local-builder
           provenance: false
           tags: |
             ${{ env.REGISTRY }}/bohessefm/gohorsejobs:latest
@@ -55,6 +58,7 @@ jobs:
           context: ./backoffice
           file: ./backoffice/Dockerfile
           push: true
+          builder: local-builder
           provenance: false
           tags: |
             ${{ env.REGISTRY }}/bohessefm/backoffice:latest
@@ -116,7 +120,7 @@ jobs:
             --docker-password='${{ secrets.FORGEJO_TOKEN }}' \
             --dry-run=client -o yaml | kubectl apply -f -
 
-          # Garante o ImagePullSecret na conta padrão
+          # Garante o ImagePullSecret na conta padrão para evitar ErrImagePull
           kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "forgejo-registry"}]}' -n gohorsejobsdev
 
           # Aplica os Manifestos