diff --git a/.gitea/workflows/deploy-prod.yml b/.gitea/workflows/deploy-prod.yml
index b40e7339..5c4cf0ee 100644
--- a/.gitea/workflows/deploy-prod.yml
+++ b/.gitea/workflows/deploy-prod.yml
@@ -92,10 +92,10 @@ jobs:
           echo "🔧 Preparing database environment..."
 
           DB_PASSWORD="${{ secrets.QUANTENGINE_DB_PASSWORD }}"
-          # Fallback to known production password if secret not set
           if [ -z "$DB_PASSWORD" ]; then
-            DB_PASSWORD="6r8mJ2QTcv@AuoCQ&#XkOmPlfi@v7vHJ"
-            echo "ℹ️  Using production database password"
+            echo "❌ QUANTENGINE_DB_PASSWORD secret not configured in Gitea"
+            echo "   Please set secret in Repository Settings > Secrets"
+            exit 1
           fi
 
           if [ -z "${{ env.QUANTENGINE_DB_NAME }}" ] || [ -z "${{ env.QUANTENGINE_DB_USER }}" ]; then