diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 5546f70..8f3d6fb 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -29,10 +29,33 @@ jobs:
         run: dotnet test src/TaxBaik.sln -c Release --no-build
 
       - name: Publish Web (auto-includes WASM from referenced TaxBaik.Web.Client)
-        run: dotnet publish src/TaxBaik.Web/ -c Release -o ./publish -p:SelfContained=false -p:PublishReadyToRun=false
+        run: |
+          set -e
+          start=$(date +%s)
+          dotnet publish src/TaxBaik.Web/ \
+            -c Release \
+            -o ./publish \
+            --no-restore \
+            -p:SelfContained=false \
+            -p:PublishReadyToRun=false \
+            -p:PerformanceSummary=true \
+            -clp:Summary
+          end=$(date +%s)
+          echo "✓ Publish Web elapsed: $((end - start))s"
 
       - name: Publish Proxy
-        run: dotnet publish src/TaxBaik.Proxy/ -c Release -o ./publish/proxy -p:PublishReadyToRun=false
+        run: |
+          set -e
+          start=$(date +%s)
+          dotnet publish src/TaxBaik.Proxy/ \
+            -c Release \
+            -o ./publish/proxy \
+            --no-restore \
+            -p:PublishReadyToRun=false \
+            -p:PerformanceSummary=true \
+            -clp:Summary
+          end=$(date +%s)
+          echo "✓ Publish Proxy elapsed: $((end - start))s"
 
       - name: Write production secrets
         run: |
@@ -322,7 +345,7 @@ jobs:
           check_public() {
             local url="$1"
             local status
-            status=$(curl -s -o /dev/null -w '%{http_code}' --max-time 15 "$url" || echo "000")
+            status=$(curl -fsSL -o /dev/null -w '%{http_code}' --max-time 15 "$url" || echo "000")
             if [ "$status" != "200" ]; then
               echo "  ✗ $url → HTTP $status" >&2
               return 1