diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 026cc077..d46950ae 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -335,13 +335,13 @@ jobs:
           export DATABASE_POOL_SIZE="${DEPLOY_DATABASE_POOL_SIZE:-5}"
           echo "STAGE DATABASE_POOL_SIZE=${DATABASE_POOL_SIZE}"
 
-           pnpm install --frozen-lockfile
-           # prisma generate only needs DATABASE_URL to resolve the schema — no live DB connection.
-           # Use a placeholder so it doesn't fail if .env isn't loaded yet; db:migrate later
-           # will use the real DATABASE_URL from the live .env symlink.
-           export DATABASE_URL="mysql://placeholder:please@localhost/placeholder"
-           pnpm prisma:generate
-           unset DATABASE_URL
+          pnpm install --frozen-lockfile
+          # prisma generate only needs DATABASE_URL to resolve the schema — no live DB connection.
+          # Use a placeholder so it doesn't fail if .env isn't loaded yet; db:migrate later
+          # will use the real DATABASE_URL from the live .env symlink.
+          export DATABASE_URL="mysql://placeholder:please@localhost/placeholder"
+          pnpm prisma:generate
+          unset DATABASE_URL
           export BCRYPT_ROUNDS=4
           pnpm typecheck
           # Validate production env (AUTH_SECRET, DATABASE_URL, …) during build.