diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 32be6b6..3e9e3bf 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -12,8 +12,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Build Docker image
-        run: |
-          docker build -t digital-home-dashboard:latest .
+        run: docker build -t digital-home-dashboard:latest .
 
       - name: Stop old container
         run: |
@@ -28,14 +27,14 @@ jobs:
             --network coolify \
             --add-host=host.docker.internal:host-gateway \
             -p 3005:3000 \
-            -e NEXTAUTH_SECRET=digital-home-jwt-secret-2026-cosmo \
-            -e NEXTAUTH_URL=https://home.digital-home.site \
+            -e NEXTAUTH_SECRET=${{ secrets.NEXTAUTH_SECRET }} \
+            -e NEXTAUTH_URL=${{ secrets.NEXTAUTH_URL }} \
             -e AUTH_TRUST_HOST=true \
             -e NODE_ENV=production \
             -e GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }} \
             -e GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }} \
             -e GOOGLE_REFRESH_TOKEN=${{ secrets.GOOGLE_REFRESH_TOKEN }} \
-            -e GOOGLE_CALENDAR_ID=daniilklimov25@gmail.com \
+            -e GOOGLE_CALENDAR_ID=${{ secrets.GOOGLE_CALENDAR_ID }} \
             --label 'traefik.enable=true' \
             --label 'traefik.http.middlewares.gzip.compress=true' \
             --label 'traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https' \
@@ -53,5 +52,6 @@ jobs:
       - name: Health check
         run: |
           sleep 5
-          curl -sf http://localhost:3005/ -o /dev/null -w "%{http_code}" | grep -E "200|307"
-          echo "✅ Dashboard is up"
+          STATUS=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:3005/)
+          echo "HTTP status: $STATUS"
+          [[ "$STATUS" == "200" || "$STATUS" == "307" ]] && echo "✅ Dashboard is up" || exit 1