diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 440bab34..09b9254a 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -216,7 +216,11 @@ jobs:
             # Tracking table: _schema_migrations (filename TEXT PRIMARY KEY).
             # Each NN_*.sql file is applied exactly once, in sort order.
             # ON_ERROR_STOP=on ensures a failing migration aborts the deploy.
-            set -a; source backend/.env; set +a
+            # POSTGRES_USER/PASSWORD/DB живут в /opt/gendesign/.env (root —
+            # их читает compose через env_file для postgres service).
+            # backend/.env содержит ТОЛЬКО backend-app vars (SCRAPE_ADMIN_TOKEN,
+            # OPENROUTESERVICE_API_KEY, etc), без POSTGRES_*.
+            set -a; source .env; set +a
 
             # Ensure tracking table exists (idempotent).
             docker compose -p gendesign -f docker-compose.prod.yml exec -T postgres \