diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 772f590..a292b9d 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -11,20 +11,20 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: SSH-Key laden
-        uses: webfactory/ssh-agent@v0.9.0
-        with:
-          ssh-private-key: ${{ secrets.PBT_DEPLOY_KEY }}
-
-      - name: Host-Key vertrauen
-        run: ssh-keyscan -H pbt >> ~/.ssh/known_hosts
-
       - name: rsync installieren
-        run: apt-get update && apt-get install -y rsync
+        run: apt-get update && apt-get install -y rsync openssh-client
+
+      - name: SSH-Key als Datei anlegen
+        run: |
+          mkdir -p ~/.ssh
+          printf '%s\n' "${{ secrets.PBT_DEPLOY_KEY }}" > ~/.ssh/pbt_deploy_key
+          chmod 600 ~/.ssh/pbt_deploy_key
+          ssh-keyscan -H pbt >> ~/.ssh/known_hosts
 
       - name: Dateien auf die pbt-LXC syncen
         run: |
           rsync -avz --delete \
+            -e "ssh -i ~/.ssh/pbt_deploy_key -o UserKnownHostsFile=~/.ssh/known_hosts" \
             --exclude '.git' \
             --exclude '.gitea' \
             --exclude 'venv' \
@@ -33,7 +33,7 @@ jobs:
 
       - name: Abhängigkeiten installieren & Service neu starten
         run: |
-          ssh deploy@pbt '
+          ssh -i ~/.ssh/pbt_deploy_key -o UserKnownHostsFile=~/.ssh/known_hosts deploy@pbt '
             set -e
             cd /opt/pbt
             python3 -m venv venv