diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index e709b95..48f459d 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -36,6 +36,10 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          labels: |
+            org.opencontainers.image.title=beacon-server
+            org.opencontainers.image.description=Beacon — MeshCore LoRa mesh observation server
+            org.opencontainers.image.licenses=AGPL-3.0-or-later
           tags: |
             type=raw,value=latest,enable={{is_default_branch}}
             type=raw,value=dev,enable=${{ github.ref == 'refs/heads/dev' }}
diff --git a/README.md b/README.md
index b4489eb..9d620bb 100644
--- a/README.md
+++ b/README.md
@@ -85,6 +85,8 @@ Or pull and run the Docker image:
 docker pull ghcr.io/meshcore-beacon/beacon-server:latest
 ```
 
+The image is public on GitHub Container Registry — no `docker login` required.
+
 Beacon will:
 
 - Load `.env` and `config.yaml`