diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 508f856..560b3ad 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -28,9 +28,20 @@ jobs:
           apt-get update -qq && apt-get install -y rsync
           echo "${{ secrets.SSH_DEPLOY_KEY }}" > /tmp/deploy_key
           chmod 600 /tmp/deploy_key
+          SSH="ssh -o StrictHostKeyChecking=no -i /tmp/deploy_key root@167.86.74.105"
+
+          # .env aus Secrets generieren
+          $SSH "cat > /opt/rustycms/.env" << 'ENVEOF'
+          RUSTYCMS_API_KEY=${{ secrets.RUSTYCMS_API_KEY }}
+          RUSTYCMS_BASE_URL=${{ secrets.RUSTYCMS_BASE_URL }}
+          RUSTYCMS_CORS_ORIGIN=${{ secrets.RUSTYCMS_CORS_ORIGIN }}
+          RUSTYCMS_LOCALES=${{ secrets.RUSTYCMS_LOCALES }}
+          RUSTYCMS_CACHE_TTL_SECS=${{ secrets.RUSTYCMS_CACHE_TTL_SECS }}
+          RUSTYCMS_STORE=${{ secrets.RUSTYCMS_STORE }}
+          ENVEOF
+
           rsync -avz --delete \
             -e "ssh -o StrictHostKeyChecking=no -i /tmp/deploy_key" \
             ./types/ root@167.86.74.105:/opt/rustycms/types/
-          ssh -o StrictHostKeyChecking=no -i /tmp/deploy_key root@167.86.74.105 \
-            "docker compose -f /opt/rustycms/docker-compose.yml up -d && docker image prune -f"
+          $SSH "docker compose -f /opt/rustycms/docker-compose.yml up -d && docker image prune -f"
           rm /tmp/deploy_key