diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5fc1045..3a81d31 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -75,6 +75,7 @@ jobs:
             VERSIONSUFFIX=docker
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          provenance: false
 
       - name: Export Docker image to tar
         run: docker save empostor-server:${{ matrix.arch.rid }} -o empostor-server-docker-${{ matrix.arch.rid }}.tar
diff --git a/Dockerfile b/Dockerfile
index d46a75f..e965c73 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -57,11 +57,11 @@ RUN case "$TARGETARCH" in \
     -p:VersionSuffix="$VERSIONSUFFIX" \
     -o /app
 
-# Copy runtime assets
+# Copy default config (must be overridden in production)
 RUN cp ./src/Empostor.Server/config.json /app/config.json 2>/dev/null || true
 
 # ── Runtime stage ──────────────────────────
-FROM --platform=$TARGETPLATFORM mcr.microsoft.com/dotnet/aspnet:8.0
+FROM mcr.microsoft.com/dotnet/aspnet:8.0
 
 WORKDIR /app