diff --git a/.gitea/workflows/deploy-claude-dev-dev.yml b/.gitea/workflows/deploy-claude-dev-dev.yml
index f083fe8..c518716 100644
--- a/.gitea/workflows/deploy-claude-dev-dev.yml
+++ b/.gitea/workflows/deploy-claude-dev-dev.yml
@@ -22,6 +22,7 @@ jobs:
       volumes:
         - /var/packages/ContainerManager/target/usr/bin/docker:/usr/bin/docker
         - /volume1/docker/claude-dev:/claude-dev-runtime
+        - /volume1/docker/nas-dashboard/ssh/vps_terminal:/runner-ssh/server2_key:ro
     steps:
       - name: Checkout exact commit
         run: |
@@ -56,7 +57,8 @@ jobs:
         if: env.ROLLBACK_ONLY == '0'
         run: |
           set -euo pipefail
-          if ssh -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then
+          chmod 600 /runner-ssh/server2_key
+          if ssh -i /runner-ssh/server2_key -o IdentitiesOnly=yes -o StrictHostKeyChecking=accept-new jimmyg@158.101.140.85 "podman pull docker.io/library/node:20-bookworm-slim >/dev/null && podman save docker.io/library/node:20-bookworm-slim" | docker load; then
             echo "Preloaded node:20-bookworm-slim from server2"
           else
             echo "Preload from server2 failed; continuing with registry pull during docker build"