diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 2d4077e..1505557 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -17,15 +17,18 @@ jobs:
       - name: Build
         run: hugo --minify
       
-      - name: Debug SSH key
+      - name: Verify secret presence
         run: |
-          echo "Key length: $(echo "$SSH_KEY" | wc -c)"
-          echo "${{secrets.deploy_path}}"
+          [ -n "$SSH_KEY" ] && echo "SSH_KEY is non-empty" || echo "SSH_KEY missing"
+          [ -n "$SSH_USER" ] && echo "SSH_USER is non-empty" || echo "SSH_USER missing"
+          [ -n "$SSH_HOST" ] && echo "SSH_HOST is non-empty" || echo "SSH_HOST missing"
+          [ -n "$DEPLOY_PATH" ] && echo "DEPLOY_PATH is non-empty" || echo "DEPLOY_PATH missing"
+        env:
+          SSH_KEY: ${{ secrets.SSH_KEY }}
+          SSH_USER: ${{ secrets.SSH_USER }}
+          SSH_HOST: ${{ secrets.SSH_HOST }}
+          DEPLOY_PATH: ${{ secrets.DEPLOY_PATH }}
 
-      - name: Dump env (sanitized)
-        run: |
-          echo "All env vars injected:"
-          env | sort | grep -E 'SSH_|GITEA|ACT' || true
       - name: Deploy
         run: |
           apk add --no-cache rsync openssh