diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index cf6cd26..3f176b9 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -36,8 +36,19 @@ jobs:
 
       - name: Deploy
         run: |
-          docker compose pull backend frontend
-          docker compose up -d --remove-orphans
+          # Spawn a short-lived container that mounts the host deploy path
+          # and runs compose commands against the host Docker daemon.
+          # DEPLOY_PATH is a Gitea variable — update it when moving hosts.
+          docker run --rm \
+            --network host \
+            --security-opt label:disable \
+            -v /var/run/docker.sock:/var/run/docker.sock \
+            -v ${{ vars.DEPLOY_PATH }}:/deploy \
+            -w /deploy \
+            docker:cli sh -c "
+              docker compose pull backend frontend &&
+              docker compose up -d --remove-orphans
+            "
 
       - name: Health check
         run: |