diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 0a4cd375..96b6310b 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -398,12 +398,14 @@ jobs:
           scp docker-compose.yml root@alpha.mintel.me:$SITE_DIR/docker-compose.yml
           
           # Execute remote commands
+          TOKEN_VALUE="$REGISTRY_PASS"
+          USER_VALUE="$REGISTRY_USER"
           ssh root@alpha.mintel.me bash <<DEPLOYEOF
           set -e
-          cd $SITE_DIR
-          printf '%s' '$REGISTRY_PASS' | docker login git.infra.mintel.me -u '$REGISTRY_USER' --password-stdin
-          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' pull
-          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' up -d --remove-orphans
+          cd ${SITE_DIR}
+          printf '%s' "${TOKEN_VALUE}" | docker login git.infra.mintel.me -u "${USER_VALUE}" --password-stdin
+          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '${ENV_FILE}' pull
+          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '${ENV_FILE}' up -d --remove-orphans
           DEPLOYEOF
           
           # Sanitize Payload Migrations: Replace 'dev' push entries with proper migration names.