diff --git a/.gitea/workflows/docker.yaml b/.gitea/workflows/docker.yaml
index f18a7392..dd333c99 100644
--- a/.gitea/workflows/docker.yaml
+++ b/.gitea/workflows/docker.yaml
@@ -13,31 +13,17 @@ jobs:
       - name: Clone Repository
         uses: actions/checkout@v4
 
-      - name: Fix DNS for registry
+      - name: Show resolver + DNS answers
         run: |
-          echo "185.243.8.189 docker.srsoftware.de" | sudo tee -a /etc/hosts
-          getent hosts docker.srsoftware.de
-
-      - name: Debug DNS + TLS from runner
-        run: |
-          apt update
-          apt install -y dnsutils openssl
           set -x
+          cat /etc/resolv.conf
+          echo "=== getent ==="
           getent hosts docker.srsoftware.de || true
-          dig +short docker.srsoftware.de || true
-          dig @8.8.8.8 docker.srsoftware.de +short || true
-          dig @1.1.1.1 docker.srsoftware.de +short || true
-          dig @$(awk 'NR==1{print $2}' /etc/resolv.conf) docker.srsoftware.de +short || true
-
-      - name: Debug certificate (runner)
-        run: |
-          set -x
-          echo | openssl s_client -connect docker.srsoftware.de:443 -servername docker.srsoftware.de 2>/dev/null \
-            | openssl x509 -noout -subject -issuer -ext subjectAltName
-          echo | openssl s_client -connect 46.38.238.106:443 -servername docker.srsoftware.de 2>/dev/null \
-            | openssl x509 -noout -ext subjectAltName
-          echo | openssl s_client -connect 185.243.8.189:443 -servername docker.srsoftware.de 2>/dev/null \
-            | openssl x509 -noout -ext subjectAltName
+          echo "=== using the configured resolver IP(s) ==="
+          while read -r line; do
+            ns="$(echo "$line" | awk '{print $2}')"
+            [ -n "$ns" ] && dig @"$ns" docker.srsoftware.de +short
+          done < <(grep '^nameserver' /etc/resolv.conf || true)
 
       - name: Login to registry (direct docker CLI)
         run: |