diff --git a/.gitea/workflows/nightly.yml b/.gitea/workflows/nightly.yml
index 1805d5d6..ce3b0d3f 100644
--- a/.gitea/workflows/nightly.yml
+++ b/.gitea/workflows/nightly.yml
@@ -4,12 +4,15 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - main
+      - 'main'
     paths-ignore:
       - '.gitignore'
       - '*.md'
-      - '.forgejo/**'
-      - '!.forgejo/workflows/nightly.yml'
+      - '.gitea/**'
+      - '!.gitea/workflows/nightly.yml'
+
+permissions:
+  contents: write
 
 concurrency:
   group: nightly
@@ -32,7 +35,11 @@ jobs:
       - name: Cache Nix store
         uses: https://code.forgejo.org/actions/cache@v4
         with:
-          path: ~/.cache/nix
+          path: |
+            ~/.cache/nix
+            /nix/store
+            /nix/var/nix/db
+            /nix/var/nix/gcroots
           key: nix-${{ runner.os }}-${{ hashFiles('flake.lock') }}
           restore-keys: |
             nix-${{ runner.os }}-
diff --git a/.gitea/workflows/nightly.yml.rej b/.gitea/workflows/nightly.yml.rej
new file mode 100644
index 00000000..2bbce43e
--- /dev/null
+++ b/.gitea/workflows/nightly.yml.rej
@@ -0,0 +1,20 @@
+diff a/.gitea/workflows/nightly.yml b/.gitea/workflows/nightly.yml	(rejected hunks)
+@@ -4,15 +4,12 @@
+   workflow_dispatch:
+   push:
+     branches:
+-      - 'main'
++      - main
+     paths-ignore:
+       - '.gitignore'
+       - '*.md'
+-      - '.gitea/**'
+-      - '!.gitea/workflows/nightly.yml'
+-
+-permissions:
+-  contents: write
++      - '.forgejo/**'
++      - '!.forgejo/workflows/nightly.yml'
+ 
+ concurrency:
+   group: nightly