diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 288a54e..e878b25 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -27,7 +27,8 @@ jobs:
       # 产出 target/userbase.jar 落到工作区。
       - name: Build jar (maven, host network, nexus maven-public)
         # maven-settings.xml 将 central 指向 nexus maven-public（含内部 SNAPSHOT BOM 与 central 代理）
-        run: docker run --rm --network=host -v $PWD:/build -w /build maven:3.9-eclipse-temurin-8 mvn -s maven-settings.xml -B -DskipTests package
+        # 挂载宿主 /opt/docker/ubs-m2 作为 maven 本地仓库缓存，加速重复构建
+        run: docker run --rm --network=host -v $PWD:/build -v /opt/docker/ubs-m2:/root/.m2 -w /build maven:3.9-eclipse-temurin-8 mvn -s maven-settings.xml -B -DskipTests package
 
       - name: Build image on host daemon
         run: docker build -f docker/Dockerfile -t userbase-service:latest .
diff --git a/maven-settings.xml b/maven-settings.xml
index 6fee94c..2107fa9 100644
--- a/maven-settings.xml
+++ b/maven-settings.xml
@@ -1,4 +1,15 @@
 <settings>
+  <!-- Maven 3.8+ 默认拦截 HTTP 仓库（maven-default-http-blocker）。
+       nexus maven-public 仅提供 HTTP，故在此覆盖该 blocker，放行内网 nexus。 -->
+  <mirrors>
+    <mirror>
+      <id>maven-default-http-blocker</id>
+      <mirrorOf>external:http:*</mirrorOf>
+      <name>nexus maven-public (allow http)</name>
+      <url>http://192.168.10.160:8081/repository/maven-public/</url>
+      <blocked>false</blocked>
+    </mirror>
+  </mirrors>
   <profiles>
     <profile>
       <id>nexus</id>