diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index fa6e4cf0..3f8b058e 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -160,12 +160,13 @@ jobs:
           SENTRY_RELEASE_VAL: ${{ github.sha }}
           GHCR_PAT: ${{ secrets.GHCR_PAT }}
           GLITCHTIP_BACKEND_DSN: ${{ secrets.GLITCHTIP_BACKEND_DSN }}
+          OBJECTIVE_API_KEY: ${{ secrets.OBJECTIVE_API_KEY }}
         with:
           host: ${{ secrets.DEPLOY_HOST }}
           username: ${{ secrets.DEPLOY_USER }}
           key: ${{ secrets.DEPLOY_SSH_KEY }}
           port: ${{ secrets.DEPLOY_PORT }}
-          envs: IMAGE_TAG,SENTRY_RELEASE_VAL,GHCR_PAT,GLITCHTIP_BACKEND_DSN
+          envs: IMAGE_TAG,SENTRY_RELEASE_VAL,GHCR_PAT,GLITCHTIP_BACKEND_DSN,OBJECTIVE_API_KEY
           script: |
             set -euo pipefail
             cd /opt/gendesign
@@ -197,6 +198,13 @@ jobs:
             else
                 printf 'GLITCHTIP_DSN=%s\n' "$GLITCHTIP_BACKEND_DSN" >> backend/.env.runtime
             fi
+            # Objective API key — для live scraper sync_all_groups (issue #307 OBJ-1).
+            # Пустой secret = no-op (sync_objective_group skipped с reason=no_api_key).
+            if grep -q '^OBJECTIVE_API_KEY=' backend/.env.runtime; then
+                sed -i "s|^OBJECTIVE_API_KEY=.*|OBJECTIVE_API_KEY=$OBJECTIVE_API_KEY|" backend/.env.runtime
+            else
+                printf 'OBJECTIVE_API_KEY=%s\n' "$OBJECTIVE_API_KEY" >> backend/.env.runtime
+            fi
             chmod 600 backend/.env.runtime
 
             # External network для Caddy + obsidian-stack share