diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 1e56506..b270f52 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -71,7 +71,7 @@ jobs:
             local key="$1" val="$2"
             [ -z "$val" ] && return
             sed -i "/^[[:space:]]*${key}=/d" "$ENV_FILE"
-            echo "${key}=\"${val}\"" >> "$ENV_FILE"
+            echo "${key}=${val}" >> "$ENV_FILE"
           }
           upsert NEXTAUTH_URL           "$APP_URL"
           upsert NEXTAUTH_SECRET        "$NEXTAUTH_SECRET"
diff --git a/scripts/deploy-prod.sh b/scripts/deploy-prod.sh
index 53e91fc..fc1b0f4 100755
--- a/scripts/deploy-prod.sh
+++ b/scripts/deploy-prod.sh
@@ -129,7 +129,8 @@ cd "$ROOT"
 
 # Sanitize .env.docker: Docker Compose v2 rejects quoted values (VAR="val" → VAR=val)
 if [ -f "$ROOT/.env.docker" ]; then
-  sed -i -E 's/^([A-Za-z_][A-Za-z0-9_]*)=(["\x27])(.*)\2$/\1=\3/' "$ROOT/.env.docker" || true
+  sed -i -E 's/^([A-Za-z_][A-Za-z0-9_]*)="(.*)"$/\1=\2/' "$ROOT/.env.docker" || true
+  sed -i -E "s/^([A-Za-z_][A-Za-z0-9_]*)='(.*)'$/\1=\2/" "$ROOT/.env.docker" || true
 fi
 
 load_env_docker