diff --git a/src/Nocr.Users.Host/Dockerfile b/src/Nocr.Users.Host/Dockerfile
index 1c585c0..118408b 100644
--- a/src/Nocr.Users.Host/Dockerfile
+++ b/src/Nocr.Users.Host/Dockerfile
@@ -16,8 +16,11 @@ RUN apt-get update && \
     update-ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-# Copy nuget.config from parent repository (via additional_contexts)
-COPY --from=rootconfig nuget.config /root/.nuget/NuGet/NuGet.Config
+# Copy nuget.config from build context root
+# Must be copied to submodule root before building:
+# - CI: pipeline copies it with "cp nuget.config users/"
+# - Docker Compose: run ./prepare-build.sh first
+COPY nuget.config /root/.nuget/NuGet/NuGet.Config
 
 COPY . .
 
diff --git a/src/Nocr.Users.Migrator/Dockerfile b/src/Nocr.Users.Migrator/Dockerfile
index 2523a1f..2af24c6 100644
--- a/src/Nocr.Users.Migrator/Dockerfile
+++ b/src/Nocr.Users.Migrator/Dockerfile
@@ -10,8 +10,11 @@ RUN apt-get update && \
     update-ca-certificates && \
     rm -rf /var/lib/apt/lists/*
 
-# Copy nuget.config from parent repository (via additional_contexts)
-COPY --from=rootconfig nuget.config /root/.nuget/NuGet/NuGet.Config
+# Copy nuget.config from build context root
+# Must be copied to submodule root before building:
+# - CI: pipeline copies it with "cp nuget.config users/"
+# - Docker Compose: run ./prepare-build.sh first
+COPY nuget.config /root/.nuget/NuGet/NuGet.Config
 
 COPY . .