diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index 123b56e..46e087f 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -26,10 +26,14 @@ jobs:
       with:
         images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
         tags: |
+          # Keep a moving branch tag (e.g., main)
           type=ref,event=branch
+          # Version tag on releases (e.g., v1.2.3)
           type=ref,event=tag
-          type=raw,value=latest,enable={{is_default_branch}}
+          # Snapshot tag for commits on the default branch (e.g., snapshot-<hash>)
           type=raw,value=snapshot-{{sha}},enable={{is_default_branch}}
+          # Move "latest" only when building from a tag
+          type=raw,value=latest,enable={{is_tag}}
 
     - name: Log in to Container Registry
       uses: docker/login-action@v3