diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index b7db86b..bdedf8a 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -55,7 +55,7 @@ jobs:
         ssh -p "${DEPLOY_PORT:-22}" "${DEPLOY_USER}@${DEPLOY_HOST}" "mkdir -p \"${DEPLOY_PATH}/deploy/docker\""
         scp -P "${DEPLOY_PORT:-22}" deploy/docker/docker-compose.yml "${DEPLOY_USER}@${DEPLOY_HOST}:${DEPLOY_PATH}/deploy/docker/docker-compose.yml"
 
-        ssh -p "${DEPLOY_PORT:-22}" "${DEPLOY_USER}@${DEPLOY_HOST}" <<EOF
+        ssh -p "${DEPLOY_PORT:-22}" "${DEPLOY_USER}@${DEPLOY_HOST}" "DEPLOY_PATH='${DEPLOY_PATH}' IMAGE_REPO='${IMAGE_REPO}' IMAGE_TAG='${IMAGE_TAG}' REGISTRY='${REGISTRY}' REGISTRY_USERNAME='${REGISTRY_USERNAME}' REGISTRY_PASSWORD='${REGISTRY_PASSWORD}' bash -se" <<'EOF'
         set -euo pipefail
         cd "${DEPLOY_PATH}"
 
@@ -69,18 +69,18 @@ jobs:
         docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env pull app
         docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env up -d app
         docker compose -f deploy/docker/docker-compose.yml ps
-        HEALTH_URL="http://127.0.0.1:\${HOST_BIND_PORT:-3000}/api/docs"
+        HEALTH_URL="http://127.0.0.1:${HOST_BIND_PORT:-3000}/api/docs"
         HEALTH_OK=0
-        for i in \$(seq 1 30); do
-          if curl -fsS "\${HEALTH_URL}" >/dev/null; then
+        for i in $(seq 1 30); do
+          if curl -fsS "${HEALTH_URL}" >/dev/null; then
             HEALTH_OK=1
             break
           fi
           sleep 2
         done
-        if [ "\${HEALTH_OK}" -ne 1 ]; then
+        if [ "${HEALTH_OK}" -ne 1 ]; then
           docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env logs --tail=200 app || true
-          echo "Health check failed: \${HEALTH_URL}"
+          echo "Health check failed: ${HEALTH_URL}"
           exit 1
         fi
         EOF