diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 77cfcf8..7435d40 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -138,12 +138,18 @@ jobs:
       # one host. Consumers: see the infrastructure README.
       - name: Publish to the Arch package registry
         run: |
+          set -euo pipefail
           cd aur
+          # Build both arches here (repackaging the released binaries) and
+          # push each to the instance Arch registry. Use --packagelist for
+          # the exact filename (honours the runner's PKGEXT/PKGDEST) rather
+          # than globbing, and !strip (in the PKGBUILD) so packaging the
+          # foreign-arch binary on this host does not try to strip it.
           for carch in aarch64 x86_64; do
-            rm -f ./*.pkg.tar.zst
-            CARCH=$carch makepkg -f --nodeps
-            curl --fail --user "${{ gitea.actor }}:${{ secrets.GITHUB_TOKEN }}" \
-              --upload-file ./*-$carch.pkg.tar.zst \
+            pkgfile=$(CARCH="$carch" makepkg --packagelist | tail -1)
+            CARCH="$carch" makepkg -f --nodeps --noconfirm --skipinteg
+            curl --fail-with-body --user "${{ gitea.actor }}:${{ secrets.GITHUB_TOKEN }}" \
+              --upload-file "$pkgfile" \
               "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/arch/uhhm"
           done
 
diff --git a/aur/PKGBUILD b/aur/PKGBUILD
index da4f129..487092b 100644
--- a/aur/PKGBUILD
+++ b/aur/PKGBUILD
@@ -4,6 +4,7 @@ pkgver=0.2.5
 pkgrel=1
 pkgdesc="Web chat over NATS subjects with Kanidm SSO (Leptos SSR)"
 arch=('x86_64' 'aarch64')
+options=('!strip')
 url="https://project.uhhm.no/bl/cnats"
 license=('MIT')
 depends=('glibc' 'gcc-libs')