diff --git a/.gitea/workflows/reusable-prepare-workspace.yml b/.gitea/workflows/reusable-prepare-workspace.yml
index 7e1e827..4988696 100644
--- a/.gitea/workflows/reusable-prepare-workspace.yml
+++ b/.gitea/workflows/reusable-prepare-workspace.yml
@@ -40,12 +40,19 @@ on:
         description: "Node 安装缓存目录"
         required: false
         type: string
-        default: "$HOME/.local/node-ci"
+        default: ""
       run_commands:
         description: "准备完成后执行的额外命令（多行 shell）"
         required: false
         type: string
         default: ""
+    secrets:
+      SSH_PRIVATE_KEY:
+        required: false
+      REGISTRY_USERNAME:
+        required: false
+      REGISTRY_PASSWORD:
+        required: false
 
 jobs:
   prepare:
@@ -82,6 +89,10 @@ jobs:
             echo "${resolved}"
           }
 
+          if [ -z "${NODE_INSTALL_ROOT}" ]; then
+            NODE_INSTALL_ROOT="${HOME}/.local/node-ci"
+          fi
+
           detect_arch() {
             case "$(uname -m)" in
               x86_64) echo "x64" ;;
@@ -155,6 +166,10 @@ jobs:
 
       - name: Run extra commands
         if: ${{ inputs.run_commands != '' }}
+        env:
+          SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
         run: |
           set -euo pipefail
           printf '%s\n' "${RUN_COMMANDS}" > /tmp/reusable-prepare-run.sh