diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 250a35b..0ef92d5 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -41,8 +41,8 @@ jobs:
           cp -r client/dist deploy-pkg/app/client/dist
           cp -r server/dist deploy-pkg/app/server/dist
           cp -r server/node_modules deploy-pkg/app/server/node_modules
-          cp -r server/src/db/schema.sql deploy-pkg/app/server/src/db/schema.sql 2>/dev/null || mkdir -p deploy-pkg/app/server/src/db && cp server/src/db/schema.sql deploy-pkg/app/server/src/db/
-          cp docker-compose.yml deploy-pkg/
+          mkdir -p deploy-pkg/app/server/src/db
+          cp server/src/db/schema.sql deploy-pkg/app/server/src/db/schema.sql
           cat > deploy-pkg/docker-compose.yml <<'EOF'
           services:
             volunteer:
@@ -50,16 +50,16 @@ jobs:
               container_name: volunteer-manage
               restart: unless-stopped
               working_dir: /app/server
-              command: sh -c "mkdir -p /app/client/dist /app/server/src/db && cp -r /tmp-src/* /app/ 2>/dev/null; [ -d /app/server/src/db ] || mkdir -p /app/server/src/db; node /app/server/dist/index.js"
+              command: ["node", "dist/index.js"]
               ports:
                 - "3000:3000"
               environment:
                 - NODE_ENV=production
                 - PORT=3000
-                - JWT_SECRET=${{ secrets.JWT_SECRET || 'volunteer-manage-secret-key-2026' }}
+                - JWT_SECRET=${JWT_SECRET:-volunteer-manage-secret-key-2026}
               volumes:
                 - /opt/volunteer/data:/app/server/data
-                - /opt/volunteer/app:/app:rw
+                - /opt/volunteer/app:/app:ro
           EOF
 
       - name: Install SSH key