diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 1ccb56a..dbee991 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -52,28 +52,22 @@ jobs:
 
   deploy:
     name: Deploy — pull & restart on host
-    runs-on: ubuntu-latest
+    runs-on: build
     needs: [publish]
     steps:
       - uses: actions/checkout@v4
 
-      - name: Write SSH key
-        run: |
-          mkdir -p ~/.ssh
-          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
-          chmod 600 ~/.ssh/deploy_key
-          ssh-keyscan -H "${{ secrets.DEPLOY_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null
+      - name: Login to registry
+        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login registry.netork.io -u "${{ secrets.REGISTRY_USER }}" --password-stdin
 
       - name: Deploy
         run: |
-          ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=no \
-            "${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}" \
-            "cd /opt/netork-website && \
-             echo '${{ secrets.REGISTRY_PASSWORD }}' | docker login registry.netork.io -u '${{ secrets.REGISTRY_USER }}' --password-stdin && \
-             docker compose pull && \
-             docker compose up -d --remove-orphans && \
-             docker logout registry.netork.io"
+          mkdir -p /opt/netork-website
+          cp docker-compose.yml /opt/netork-website/docker-compose.yml
+          cd /opt/netork-website
+          docker compose pull
+          docker compose up -d --remove-orphans
 
-      - name: Clean up SSH key
+      - name: Logout
         if: always()
-        run: rm -f ~/.ssh/deploy_key
+        run: docker logout registry.netork.io
diff --git a/docker-compose.yml b/docker-compose.yml
index 13a365e..3780fd3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,6 @@
 services:
   netork-website:
-    build: .
-    image: netork-website:latest
+    image: registry.netork.io/netork/website:latest
     container_name: netork-website
     restart: unless-stopped
     expose: