diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 2bd4f06c..88d2aba4 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -52,10 +52,16 @@ jobs:
           echo "REDIS_URL=${{ secrets.REDIS_URL }}" >> .env.remote
           echo "REDIS_KEY_PREFIX=${{ secrets.REDIS_KEY_PREFIX }}" >> .env.remote
 
-          # Create remote directory and .env file in a single SSH session to minimize connection overhead
-          ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/id_ed25519 deploy@alpha.mintel.me "mkdir -p /home/deploy/sites/klz-cables.com && cat > /home/deploy/sites/klz-cables.com/.env" < .env.remote
-
+          # Create remote directory and .env file, then run deployment in a single SSH session
+          # This avoids multiple connections and potential rate limiting/zombie process issues
           ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/id_ed25519 deploy@alpha.mintel.me << 'EOF'
+            mkdir -p /home/deploy/sites/klz-cables.com
+            cat > /home/deploy/sites/klz-cables.com/.env << 'ENV'
+NEXT_PUBLIC_UMAMI_WEBSITE_ID=${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}
+SENTRY_DSN=${{ secrets.SENTRY_DSN }}
+REDIS_URL=${{ secrets.REDIS_URL }}
+REDIS_KEY_PREFIX=${{ secrets.REDIS_KEY_PREFIX }}
+ENV
             docker login registry.infra.mintel.me \
               -u "${{ secrets.REGISTRY_USER }}" \
               -p "${{ secrets.REGISTRY_PASS }}"