diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 41112f6..4c81ff2 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -21,5 +21,7 @@ jobs:
           cp -r ./* "$DEST"/
           # 注入本次构建时间，方便肉眼确认每次 push 都更新了
           sed -i "s/__DEPLOY_TIME__/$(date '+%F %T')/" "$DEST/index.html"
+          # 群晖 ACL 目录下新文件默认权限异常，必须显式放开，否则 nginx 403
+          chmod -R 755 "$DEST"
           echo "已发布到 $DEST"
           ls -l "$DEST"