diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index c0120be..bbca965 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -13,7 +13,7 @@ jobs:
           if [ -d /tmp/api-server ]; then
             cd /tmp/api-server && git pull
           else
-            git clone http://localhost:3000/suche-Hermes/api-server.git /tmp/api-server
+            git clone http://10.2.0.7:3000/suche-Hermes/api-server.git /tmp/api-server
           fi
 
       - name: Build Docker image
@@ -86,6 +86,7 @@ jobs:
 
       - name: Deploy RAG Worker
         run: |
+          set -e
           WORKER_DIR="/opt/zhixi/backend/rag-worker"
           mkdir -p "$WORKER_DIR"
 
@@ -94,21 +95,14 @@ jobs:
             /tmp/api-server/rag-worker/ "$WORKER_DIR/"
 
           # Deploy service file and restart
-          cp "$WORKER_DIR/zhixi-worker.service" /etc/systemd/system/
-          systemctl daemon-reload
-          systemctl restart zhixi-worker
+          sudo cp "$WORKER_DIR/zhixi-worker.service" /etc/systemd/system/
+          sudo systemctl daemon-reload
+          sudo systemctl restart zhixi-worker
           sleep 5
 
           # Verify worker is running
-          if systemctl is-active zhixi-worker; then
-            echo "[deploy] zhixi-worker active OK"
-            # Verify reranker module is importable on host
-            systemd-run --pipe --wait --unit=zhixi-self-test /usr/bin/python3.11 -c "from reranker import rerank; print('[self-test] reranker module OK')" 2>&1 || echo "[deploy] self-test skipped (non-critical)"
-          else
-            echo "[deploy] zhixi-worker FAILED"
-            journalctl -u zhixi-worker --no-pager -n 20
-            exit 1
-          fi
+          sudo systemctl is-active zhixi-worker
+          echo "[deploy] zhixi-worker active OK"
 
       - name: Health check
         run: |