diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index ed60eb4..a022601 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -15,10 +15,9 @@ jobs:
         run: |
           set -e
           export HOME=/tmp
+          git config --global credential.helper '!f() { echo "username=oauth2"; echo "password=$GITEA_TOKEN"; }; f'
           git config --global --add safe.directory "${{ vars.PROD_APP_DIR }}"
           cd "${{ vars.PROD_APP_DIR }}"
-          AUTHED=$(git remote get-url origin | sed "s|://|://oauth2:${GITEA_TOKEN}@|")
-          git remote set-url origin "$AUTHED"
           git fetch --tags --force
           git checkout "${{ gitea.ref_name }}"