diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 4ef4198..f4e6a30 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -22,7 +22,8 @@ jobs:
           mkdir -p ~/.ssh
           echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H 192.168.2.2 192.168.2.40 192.168.2.30 192.168.2.31 >> ~/.ssh/known_hosts
+          echo "StrictHostKeyChecking no" >> ~/.ssh/config
+          ssh-keyscan -H 192.168.2.2 192.168.2.40 192.168.2.30 192.168.2.31 localhost >> ~/.ssh/known_hosts
           ssh-keyscan -H proxy.cyperpunk.de >> ~/.ssh/known_hosts
 
       - name: Deploy cyper-controller
diff --git a/nixos/roles/gitea.nix b/nixos/roles/gitea.nix
index 78867a2..dcef99e 100644
--- a/nixos/roles/gitea.nix
+++ b/nixos/roles/gitea.nix
@@ -222,7 +222,14 @@ in
         wget
         nix
         openssh
+        nixos-rebuild
       ];
+
+      settings = {
+        runner.env_vars = {
+          PATH = "/run/wrappers/bin:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin:/usr/bin:/bin";
+        };
+      };
     };
   };