diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 8975471..e4a114c 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -18,7 +18,16 @@ jobs:
       # Shared with interactive dev builds (see ~/.config/fish/config.fish)
       # so a crate compiled once, by either a manual build or CI, is
       # cached for the other - real cache hits, not just a warm toolchain.
+      # SCCACHE_SERVER_PORT deliberately differs from the interactive
+      # dev shell's (4227): sccache's server is discovered by a fixed
+      # TCP port shared by every local user, so if both contexts used
+      # the same port, whichever one's server happened to be running
+      # would silently "win" and serve build requests it doesn't have
+      # filesystem permission for. Separate ports keep each context's
+      # own server answering its own requests; the cache directory
+      # (not the server process) is what's actually shared.
       SCCACHE_DIR: /var/local/sccache
+      SCCACHE_SERVER_PORT: "4228"
       CARGO_TARGET_DIR: /var/local/cargo-target
     steps:
       - uses: actions/checkout@v4