diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index 5088caf..0fdc5ec 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -6,13 +6,18 @@ jobs:
   deploy:
     runs-on: self-hosted
     steps:
-      - uses: https://code.forgejo.org/actions/checkout@v4
-
-      - name: Run install-graylog.sh (idempotent - only applies what changed)
+      # Plain git clone instead of actions/checkout@v4: that action is a
+      # Node.js-based action, and this runner executes in host mode (no
+      # Docker) directly on the Graylog appliance container, which has no
+      # Node.js installed and shouldn't need one just for CI checkout.
+      - name: Deploy
         env:
           GRAYLOG_EXTERNAL_URI: http://93.171.241.5:9000/
           GRAYLOG_ADMIN_PASSWORD: ${{ secrets.GRAYLOG_ADMIN_PASSWORD }}
           DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
         run: |
+          rm -rf /tmp/graylog-deploy-ci
+          git clone --depth 1 --branch main https://git.zotac.keenetic.link/zotac/graylog-deploy.git /tmp/graylog-deploy-ci
+          cd /tmp/graylog-deploy-ci
           chmod +x install-graylog.sh
           ./install-graylog.sh