diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 80043e9..8581c71 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -10,11 +10,15 @@ jobs:
     runs-on: splendid-bear
     steps:
       - name: Checkout tag
+        env:
+          GITEA_TOKEN: ${{ gitea.token }}
         run: |
           set -e
           export HOME=/tmp
           git config --global --add safe.directory "${{ vars.PROD_APP_DIR }}"
           cd "${{ vars.PROD_APP_DIR }}"
+          AUTHED=$(git remote get-url origin | sed "s|://|://oauth2:${GITEA_TOKEN}@|")
+          git remote set-url origin "$AUTHED"
           git fetch --tags
           git checkout "${{ gitea.ref_name }}"