diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 1e71e75..a178202 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -29,6 +29,14 @@ jobs:
 
       - name: Build frontend
         working-directory: frontend
+        env:
+          # frontend/.env.local holds these for the manually-maintained
+          # /root/realtime-collab checkout, but it's gitignored, so this
+          # actions/checkout-based workspace never has it — without setting
+          # them here, Vite silently falls back to the localhost dev
+          # defaults and bakes a broken API URL into the production bundle.
+          VITE_API_URL: https://collab.m1ngdaxie.com/api
+          VITE_WS_URL: wss://collab.m1ngdaxie.com/ws
         run: |
           npm ci
           npm run build
diff --git a/.gitignore b/.gitignore
index a0150ea..fc457a2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,4 +42,4 @@ loadtest/pprof
 /docs
 
 # K3s secrets
-k3s/secret.yaml
\ No newline at end of file
+k3s/secret.yaml.playwright-mcp/