diff --git a/.gitea/workflows/deploy-staging.yml b/.gitea/workflows/deploy-staging.yml
index 92299cb..1b5a282 100644
--- a/.gitea/workflows/deploy-staging.yml
+++ b/.gitea/workflows/deploy-staging.yml
@@ -213,8 +213,8 @@ jobs:
           # printf keeps every line indented (no column-0 content) so YAML stays valid.
           printf 'CLERK_SECRET_KEY=%s\nADMIN_CLERK_SECRET_KEY=%s\n' \
             "${CLERK_SECRET_KEY}" "${ADMIN_CLERK_SECRET_KEY}" \
-            > $HOME/staging/.env
-          chmod 600 $HOME/staging/.env
+            > /opt/staging/.env
+          chmod 600 /opt/staging/.env
 
           cd /opt/staging
           podman compose up -d --force-recreate --remove-orphans