diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index c8fac0d87..ef58a72b1 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -1625,6 +1625,7 @@ jobs:
 
           run_docker_step web_build "${DOCKER_WEB_BUILD_TIMEOUT_SECONDS:-1500}" \
             docker build -f apps/web/Dockerfile \
+            --build-arg NODE_BASE_IMAGE=${{ env.HARBOR }}/dockerhub/library/node:20-alpine \
             --build-arg NEXT_PUBLIC_API_URL=https://awoooi.wooo.work \
             --build-arg CACHE_BUST=${{ github.sha }} \
             --build-arg BUILDKIT_INLINE_CACHE=1 \
diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile
index 3cc3423ae..875f006d7 100644
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -2,8 +2,9 @@
 # syntax=docker/dockerfile:1
 # 首席架構師 Review C1 (2026-04-05 Claude Code): BuildKit inline cache 需要 ARG 宣告
 ARG BUILDKIT_INLINE_CACHE=1
+ARG NODE_BASE_IMAGE=node:20-alpine
 
-FROM node:20-alpine AS base
+FROM ${NODE_BASE_IMAGE} AS base
 
 # Install pnpm
 RUN corepack enable && corepack prepare pnpm@9.0.0 --activate