diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 2f6dc2c..f7d1861 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -7,37 +7,25 @@ on:
 
 jobs:
   deploy:
-    runs-on: ubuntu-latest
-
-    env:
-      SSH_HOST: ${{ secrets.SSH_HOST }}   # e.g. psgbuild02.psg.net.au
-      SSH_USER: ${{ secrets.SSH_USER }}   # e.g. sonder
-      SSH_KEY: ${{ secrets.SSH_KEY }}     # your private key
+    runs-on: [frontend]   # ✅ matches your psgbuild02 runner
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Setup SSH
-        run: |
-          install -m 0700 -d ~/.ssh
-          echo "$SSH_KEY" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H $SSH_HOST >> ~/.ssh/known_hosts
-
       - name: Pick environment
         id: envmap
         run: |
           if [[ "${{ gitea.ref_name }}" == "main" ]]; then
             echo "ENV=prod" >> $GITHUB_OUTPUT
           else
-            echo "ENV=dev"  >> $GITHUB_OUTPUT
+            echo "ENV=dev" >> $GITHUB_OUTPUT
           fi
 
-      - name: Deploy via SSH
+      - name: Deploy via script
         run: |
           if [[ "${{ steps.envmap.outputs.ENV }}" == "prod" ]]; then
-            ssh -i ~/.ssh/id_ed25519 ${SSH_USER}@${SSH_HOST} "/home/sonder/deploy-prod.sh"
+            bash /home/sonder/deploy-prod.sh
           else
-            ssh -i ~/.ssh/id_ed25519 ${SSH_USER}@${SSH_HOST} "/home/sonder/deploy-dev.sh"
+            bash /home/sonder/deploy-dev.sh
           fi