diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 9bd60f83..3aa43a95 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -57,14 +57,18 @@ jobs:
           echo "✅ File transferred"
           echo ""
           ssh -i /tmp/deploy_key.pem -o StrictHostKeyChecking=no kjh2064@178.104.200.7 \
-            "export KARTSELL_POSTGRES='${{ secrets.KARTSELL_POSTGRES }}'; \
-             sudo mkdir -p /app/kartsell/current; \
-             sudo unzip -oq /tmp/kartsell-release.zip -d /app/kartsell/current; \
+            "set -euo pipefail; \
+             export KARTSELL_POSTGRES='${{ secrets.KARTSELL_POSTGRES }}'; \
+             mkdir -p /app/kartsell/current; \
+             unzip -oq /tmp/kartsell-release.zip -d /app/kartsell/current; \
              cd /app/kartsell/current; \
+             test -f KArtSell.DbMigrator.dll; \
+             test -f 0032_shadow_run_queued_status_contract.sql; \
              dotnet KArtSell.DbMigrator.dll; \
-             sudo systemctl restart kartsell; \
+             sudo -n systemctl restart kartsell; \
              sleep 3; \
-             systemctl is-active --quiet kartsell"
+             systemctl is-active --quiet kartsell; \
+             echo 'deployment_verified=true'"
 
           echo "✅ Artifact deployed, DbMigrator executed, and kartsell restarted"