diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index 12e04b6..a74fc6a 100644
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -74,7 +74,18 @@ jobs:
           git checkout FETCH_HEAD
 
       - name: Restore
-        run: dotnet restore src/Meezi.API/Meezi.API.csproj --source http://mirror:8081/repository/nuget-group/index.json
+        run: |
+          cat > /tmp/nuget.ci.config << 'EOF'
+          <?xml version="1.0" encoding="utf-8"?>
+          <configuration>
+            <packageSources>
+              <clear />
+              <add key="nexus" value="http://mirror:8081/repository/nuget-group/index.json"
+                   protocolVersion="3" allowInsecureConnections="true" />
+            </packageSources>
+          </configuration>
+          EOF
+          dotnet restore src/Meezi.API/Meezi.API.csproj --configfile /tmp/nuget.ci.config
 
       - name: Build
         run: dotnet build src/Meezi.API/Meezi.API.csproj --no-restore -c Release
@@ -107,7 +118,18 @@ jobs:
           git checkout FETCH_HEAD
 
       - name: Restore
-        run: dotnet restore src/Meezi.Admin.API/Meezi.Admin.API.csproj --source http://mirror:8081/repository/nuget-group/index.json
+        run: |
+          cat > /tmp/nuget.ci.config << 'EOF'
+          <?xml version="1.0" encoding="utf-8"?>
+          <configuration>
+            <packageSources>
+              <clear />
+              <add key="nexus" value="http://mirror:8081/repository/nuget-group/index.json"
+                   protocolVersion="3" allowInsecureConnections="true" />
+            </packageSources>
+          </configuration>
+          EOF
+          dotnet restore src/Meezi.Admin.API/Meezi.Admin.API.csproj --configfile /tmp/nuget.ci.config
 
       - name: Build
         run: dotnet build src/Meezi.Admin.API/Meezi.Admin.API.csproj --no-restore -c Release