diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 95b5ce2..d460cae 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -18,8 +18,11 @@ jobs:
           ssh-keyscan -H 192.168.1.190 >> ~/.ssh/known_hosts
 
       - name: Deploy via SSH
+        env:
+          APP_URL: ${{ vars.APP_URL }}
+          ADMIN_EMAIL: ${{ vars.ADMIN_EMAIL }}
         run: |
-          ssh root@192.168.1.190 << 'ENDSSH'
+          ssh root@192.168.1.190 bash << ENDSSH
             set -e
             cd /opt/memento
 
@@ -27,6 +30,27 @@ jobs:
             git config --global --add safe.directory /opt/memento
             git pull origin main
 
+            echo "=== Update config from Gitea vars ==="
+            ENV_FILE="/opt/memento/.env.docker"
+
+            if [ -n "$APP_URL" ]; then
+              if grep -q "^NEXTAUTH_URL=" "\$ENV_FILE"; then
+                sed -i "s|^NEXTAUTH_URL=.*|NEXTAUTH_URL=\"$APP_URL\"|" "\$ENV_FILE"
+              else
+                echo "NEXTAUTH_URL=\"$APP_URL\"" >> "\$ENV_FILE"
+              fi
+              echo "  NEXTAUTH_URL => $APP_URL"
+            fi
+
+            if [ -n "$ADMIN_EMAIL" ]; then
+              if grep -q "^ADMIN_EMAIL=" "\$ENV_FILE"; then
+                sed -i "s|^ADMIN_EMAIL=.*|ADMIN_EMAIL=\"$ADMIN_EMAIL\"|" "\$ENV_FILE"
+              else
+                echo "ADMIN_EMAIL=\"$ADMIN_EMAIL\"" >> "\$ENV_FILE"
+              fi
+              echo "  ADMIN_EMAIL => $ADMIN_EMAIL"
+            fi
+
             echo "=== Building ==="
             docker compose build memento-note