diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 5853278..d4c9e08 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -45,5 +45,11 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          # provenance/sbom aus: spart zusätzlichen Attestation-Export
+          provenance: false
+          sbom: false
           cache-from: type=registry,ref=${{ env.IMAGE }}:cache
-          cache-to: type=registry,ref=${{ env.IMAGE }}:cache,mode=max
+          # mode=min statt max: exportiert nur die finalen Schichten → auf langsamem
+          # NAS-Speicher spart das ~12 Min Cache-Export. Der teure Rechenaufwand
+          # (npm ci, next build) wird ohnehin über BuildKit-Cache-Mounts abgedeckt.
+          cache-to: type=registry,ref=${{ env.IMAGE }}:cache,mode=min
diff --git a/Dockerfile b/Dockerfile
index 3602e9b..d1e8eaf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,10 +1,12 @@
+# syntax=docker/dockerfile:1
 # Stage 1: Dependencies
 FROM node:20-alpine AS deps
 RUN apk add --no-cache libc6-compat openssl
 WORKDIR /app
 
 COPY package.json package-lock.json* ./
-RUN npm ci --ignore-scripts --legacy-peer-deps
+# npm-Cache über BuildKit persistent halten (schnellere Re-Installs)
+RUN --mount=type=cache,target=/root/.npm npm ci --ignore-scripts --legacy-peer-deps
 
 # Stage 2: Builder
 FROM node:20-alpine AS builder
@@ -20,15 +22,16 @@ RUN npx prisma generate
 COPY .env.docker .env
 
 # Build Next.js
-ENV NEXT_TELEMETRY_DISABLED 1
-RUN npm run build
+ENV NEXT_TELEMETRY_DISABLED=1
+# .next/cache über BuildKit persistent halten → inkrementeller Build statt jedes Mal von Null
+RUN --mount=type=cache,target=/app/.next/cache npm run build
 
 # Stage 3: Runner
 FROM node:20-alpine AS runner
 RUN apk add --no-cache openssl
 
-ENV NODE_ENV production
-ENV NEXT_TELEMETRY_DISABLED 1
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN addgroup --system --gid 1001 nodejs && \
     adduser --system --uid 1001 nextjs
@@ -62,7 +65,7 @@ COPY --chown=nextjs:nodejs server-custom.js ./server-custom.js
 COPY --chown=nextjs:nodejs docker-entrypoint.sh ./docker-entrypoint.sh
 
 EXPOSE 3000
-ENV PORT 3000
-ENV HOSTNAME "0.0.0.0"
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
 
 CMD ["sh", "docker-entrypoint.sh"]
diff --git a/package.json b/package.json
index 168f89b..b32308b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "lageplan",
-  "version": "1.4.4",
+  "version": "1.4.5",
   "description": "Feuerwehr Lageplan - Krokier-App für Einsatzdokumentation",
   "private": true,
   "scripts": {