diff --git a/.github/workflows/server-publish.yml b/.github/workflows/server-publish.yml
index 1ba193517..b5aabbb8a 100644
--- a/.github/workflows/server-publish.yml
+++ b/.github/workflows/server-publish.yml
@@ -38,3 +38,8 @@ jobs:
                   tags: ${{ inputs.commit }}, latest
                   username: ${{ github.actor }}
                   password: ${{ secrets.GITHUB_TOKEN }}
+
+            - name: Tag as server/ghcr
+              run: |
+                  git tag -f server/ghcr
+                  git push -f origin server/ghcr
diff --git a/server/docs/publish.md b/server/docs/publish.md
index de4849d90..3a49a4761 100644
--- a/server/docs/publish.md
+++ b/server/docs/publish.md
@@ -39,3 +39,7 @@ combine both these steps too.
 Once the workflow completes, the resultant image will be available at
 `ghcr.io/ente-io/server`. The image will be tagged by the commit SHA. The latest
 image will also be tagged, well, "latest".
+
+The workflow will also tag the commit it used to build the image with
+`server/ghcr`. This tag will be overwritten on each publish, and it'll point to
+the code that was used in the most recent publish.